Out-of-bounds write in virglrenderer - CVE-2022-0135

Vulnerability identifier: #VU65365

CSH Severity: Low

CVSS v4: 7.1 [CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-0135

CWE-ID: CWE-787

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to execute arbitrary code on the system.

The vulnerability exists due to a boundary error when processing untrusted input in the VirGL virtual OpenGL renderer. A local user can pass a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl, leading to a denial of service or possible code execution.

virglrenderer
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
HPE Helion Openstack
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Module for Server Applications
openSUSE Leap
openEuler
libvirglrenderer0
libvirglrenderer0-debuginfo
virglrenderer-debugsource
virglrenderer-devel
virglrenderer-debuginfo
virglrenderer
virglrenderer-test-server-debuginfo
virglrenderer-test-server
libvirglrenderer1-debuginfo
libvirglrenderer1

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

libvirglrenderer0 - addressed in versions 0.5.0-12.9.1, 0.6.0-4.9.1
libvirglrenderer0-debuginfo - addressed in versions 0.5.0-12.9.1, 0.6.0-4.9.1
virglrenderer-debugsource - addressed in versions 0.5.0-12.9.1, 0.6.0-4.9.1, 0.9.1-150400.3.3.1
virglrenderer-devel - addressed in versions 0.5.0-12.9.1, 0.6.0-4.9.1, 0.9.1-150400.3.3.1
virglrenderer-debuginfo - addressed in versions 0.6.0-4.9.1, 0.9.1-150400.3.3.1
virglrenderer-devel - update to 0.7.0-5
virglrenderer-debugsource - update to 0.7.0-5
virglrenderer-debuginfo - update to 0.7.0-5
virglrenderer - update to 0.7.0-5
virglrenderer-test-server-debuginfo - update to 0.9.1-150400.3.3.1
virglrenderer-test-server - update to 0.9.1-150400.3.3.1
libvirglrenderer1-debuginfo - update to 0.9.1-150400.3.3.1
libvirglrenderer1 - update to 0.9.1-150400.3.3.1

• https://www.suse.com/support/update/announcement/2022/suse-su-20222395-1/
• https://bugzilla.redhat.com/show_bug.cgi?id=2037790

• SUSE update for virglrenderer
• SUSE update for virglrenderer
• SUSE update for virglrenderer
• openEuler update for virglrenderer