The vulnerability of the vmw_dumb_create() function in the Linux kernel’s Direct Rendering Infrastructure (DRI) support driver allows a malicious actor to cause a service failure.

The vulnerability of the vmwdumbcreate function in the Linux kernel’s Direct Rendering Infrastructure DRI driver relates to a violation of the buffer boundary. Exploiting this vulnerability can allow an attacker to trigger a service failure...

The vulnerability of the vsock_remove_sock() function in the net/vmw_vsock/af_vsock.c module, which implements networking functions for the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the vsockremovesock function in the net/vmwvsock/afvsock.c module, which implements networking functions in the Linux kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

SUSE CVE-2024-53115

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid nullptrderef in vmwframebuffersurfacecreatehandle The 'vmwuserobjectbuffer' function may return NULL with incorrect inputs. To avoid possible null pointer dereference, add a check whether the 'bo' is NULL in the...

UBUNTU-CVE-2024-53115

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid nullptrderef in vmwframebuffersurfacecreatehandle The 'vmwuserobjectbuffer' function may return NULL with incorrect inputs. To avoid possible null pointer dereference, add a check whether the 'bo' is NULL in the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the vmwframebuffersurfacecreatehandle function in the drm/vmwgfx component that may return NULL when...

The vulnerability of DRM/VMWGFX components in Linux operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the DRM/VMWGFX components of the Linux operating system is related to a memory leak in the vmwgmridmangetnode function. Exploiting this vulnerability could allow an attacker to cause a service failure...

UBUNTU-CVE-2023-52662

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: fix a memleak in vmwgmridmangetnode When idaallocmax fails, resources allocated before should be freed, including res allocated by kmalloc and ttmresourceinit...

kernel: drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl()

A memory leak vulnerability was found in the VMware graphics driver vmwgfx in the Linux kernel. In vmwmksstataddioctl, when copying the description string from userspace fails with -EFAULT, the allocated page for the instance descriptor is not freed. This leads to memory leakage that can cause...

kernel: vmwgfx: double free within the handling of vmw_buffer_object objects

A double-free vulnerability was found in handling vmwbufferobject objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to...

AZL-27638 CVE-2023-33952 affecting package hyperv-daemons for versions less than 5.15.158.1-1

A double-free vulnerability was found in handling vmwbufferobject objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to...

CVE-2023-33952 Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects

A double-free vulnerability was found in handling vmwbufferobject objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to...

kernel: vmwgfx: out-of-bounds write in vmw_kms_cursor_snoop

An out-of-bounds memory write vulnerability was found in the Linux kernel's vmwgfx driver in vmwkmscursorsnoop due to a missing check of a memcpy length. This flaw allows a local, unprivileged attacker with access to either the /dev/dri/card0 or /dev/dri/rendererD128 and able to issue an ioctl on...

Malicious Package

Overview vmw-atk is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

MAL-2023-941 Malicious code in vmw-atk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b19932db9ddd83e47e8db2bfa9d4bb65d5d4ef19b7e632a168be191ee4cc54f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vmw-atk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b19932db9ddd83e47e8db2bfa9d4bb65d5d4ef19b7e632a168be191ee4cc54f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-35340 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15 through v5.15.74 Description: A memory leak issue was discovered in the vmw mksstat add ioctl function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

CVE-2018-20126

hw/rdma/vmw/pvrdmacmd.c in QEMU allows createcq and createqp memory leaks because errors are mishandled...

CVE-2018-20125

hw/rdma/vmw/pvrdmacmd.c in QEMU allows attackers to cause a denial of service NULL pointer dereference or excessive memory allocation in createcqring or createqprings...

CVE-2018-20216

CVE-2018-20216 : In QEMU, an infinite loop can occur in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked and -1 is mishandled. This is the only detail provided in the initial description; no explicit exploit details, affected product versions, or mitigations are included here. ...

CVE-2018-20126

Technical details about CVE-2018-20126 are not provided in the supplied documents. No information on affected products, versions, root cause, or fixes is available here; monitor for updates.