CVE-2022-36402

Katalog CVE

CVSS 5.5 · Medium EPSS 0,60%

Kerentanan Incorrect Access of Indexable Resource ('Range Error') pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).

Rincian

Terbit di NVD

16 September 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-118: Incorrect Access of Indexable Resource ('Range Error')
CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

0,60% peluang dieksploitasi; lebih tinggi dari 47,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.openanolis.cn/show_bug.cgi?id=2072 issue tracking · permissions required · advisory pihak ketiga