Wind River Support Network

HomeDefectsLIN1018-10706
Fixed

LIN1018-10706 : Security Advisory - linux - CVE-2022-36280

Created: May 16, 2023    Updated: Aug 3, 2023
Resolved Date: May 23, 2023
Found In Version: 10.18.44.1
Fix Version: 10.18.44.30
Severity: Standard
Applicable for: Wind River Linux LTS 18
Component/s: Kernel

Description

An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).

CREATE(Triage):(User=admin) CVE-2022-36280 (https://nvd.nist.gov/vuln/detail/CVE-2022-36280)

CVEs


Live chat
Online