Lucene search

K
mageiaGentoo FoundationMGASA-2022-0401
HistoryNov 02, 2022 - 1:58 a.m.

Updated virglrenderer packages fix security vulnerability

2022-11-0201:58:59
Gentoo Foundation
advisories.mageia.org
11

0.0005 Low

EPSS

Percentile

16.7%

An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl, leading to a denial of service or possible code execution. (CVE-2022-0135) A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap from the guest kernel and read this uninitialized memory from the host, possibly leading to information disclosure. (CVE-2022-0175)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchvirglrenderer< 0.8.2-1.20200212git7d204f39.1virglrenderer-0.8.2-1.20200212git7d204f39.1.mga8