CVE-2022-0175

2022-02-0100:00:00

ubuntu.com

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0005 Low

EPSS

Percentile

17.0%

JSON

A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The
virgl did not properly initialize memory when allocating a host-backed
memory resource. A malicious guest could use this flaw to mmap from the
guest kernel and read this uninitialized memory from the host, possibly
leading to information disclosure.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchvirglrenderer< anyUNKNOWN
ubuntu20.04noarchvirglrenderer< 0.8.2-1ubuntu1.1UNKNOWN
ubuntu21.10noarchvirglrenderer< 0.8.2-5ubuntu0.21.10.1UNKNOWN
ubuntu22.04noarchvirglrenderer< 0.9.1-1~exp1ubuntu2UNKNOWN
ubuntu22.10noarchvirglrenderer< 0.9.1-1~exp1ubuntu2UNKNOWN
ubuntu23.04noarchvirglrenderer< 0.9.1-1~exp1ubuntu2UNKNOWN
ubuntu23.10noarchvirglrenderer< 0.9.1-1~exp1ubuntu2UNKNOWN
ubuntu24.04noarchvirglrenderer< 0.9.1-1~exp1ubuntu2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	virglrenderer	< any	UNKNOWN
ubuntu	20.04	noarch	virglrenderer	< 0.8.2-1ubuntu1.1	UNKNOWN
ubuntu	21.10	noarch	virglrenderer	< 0.8.2-5ubuntu0.21.10.1	UNKNOWN
ubuntu	22.04	noarch	virglrenderer	< 0.9.1-1~exp1ubuntu2	UNKNOWN
ubuntu	22.10	noarch	virglrenderer	< 0.9.1-1~exp1ubuntu2	UNKNOWN
ubuntu	23.04	noarch	virglrenderer	< 0.9.1-1~exp1ubuntu2	UNKNOWN
ubuntu	23.10	noarch	virglrenderer	< 0.9.1-1~exp1ubuntu2	UNKNOWN
ubuntu	24.04	noarch	virglrenderer	< 0.9.1-1~exp1ubuntu2	UNKNOWN