6.3 CVE-2022-38096
A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).
https://nvd.nist.gov/vuln/detail/CVE-2022-38096
Categories
CWE-476
References
af854a3a-2127-422b-91ae-364da2661108
| https://bugzilla.openanolis.cn/show_bug.cgi?id=2073 Issue Tracking Permissions Required |
| https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html |
security@openanolis.org
| https://bugzilla.openanolis.cn/show_bug.cgi?id=2073 Issue Tracking Permissions Required |
| https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html |
CPE
| cpe | start | end |
|---|---|---|
| Configuration 1 | ||
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | >= 4.20 | |
REMEDIATION
EXPLOITS
Exploit-db.com
| id | description | date | |
|---|---|---|---|
| No known exploits | |||
POC Github
| Url |
|---|
Other Nist (github, ...)
| Url |
|---|
| No known exploits |
CAPEC
Common Attack Pattern Enumerations and Classifications
| id | description | severity |
|---|---|---|
| No entry | ||
Cybersecurity needs ?
Strengthen software security from the outset with our DevSecOps expertise
Integrate security right from the start of the software development cycle for more robust applications and greater customer confidence.
Our team of DevSecOps experts can help you secure your APIs, data pipelines, CI/CD chains, Docker containers and Kubernetes deployments.
