Vulnerability Description
An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 3.2, <= 5.13.0-52 |
| Debian | Debian Linux | 11.0 |
Related Weaknesses (CWE)
References
- https://bugzilla.openanolis.cn/show_bug.cgi?id=2071Issue TrackingPermissions RequiredThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html
- https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
- https://www.debian.org/security/2023/dsa-5324Third Party Advisory
- https://bugzilla.openanolis.cn/show_bug.cgi?id=2071Issue TrackingPermissions RequiredThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html
- https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
- https://www.debian.org/security/2023/dsa-5324Third Party Advisory
FAQ
What is CVE-2022-36280?
CVE-2022-36280 is a vulnerability with a CVSS score of 6.3 (MEDIUM). An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. T...
How severe is CVE-2022-36280?
CVE-2022-36280 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-36280?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Debian Debian Linux.