Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2022-36402

Date: September 16, 2022

An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).

Severity Score

Related Resources (4)

https://access.redhat.com/security/cve/CVE-2022-36402
https://bugzilla.openanolis.cn/show_bug.cgi?id=2072
https://nvd.nist.gov/vuln/detail/CVE-2022-36402
https://www.mend.io/vulnerability-database/CVE-2022-36402

Severity Score

Weakness Type (CWE)

Incorrect Access of Indexable Resource ('Range Error')

CWE-118

Integer Overflow or Wraparound

CWE-190

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): HIGH

Do you need more information?

Contact Us