CVE-2022-0175 Information disclosure in virglrenderer
A malicious guest can read uninitialized host memory via the VirGL renderer, leading to information disclosure.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-0175?
CVE-2022-0175 is a medium-severity vulnerability in Redhat Enterprise Linux, published on 26 Aug 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap from the guest kernel and read this uninitialized memory from the host, possibly leading to information disclosure.
Weakness: CWE-909
Which versions are affected by CVE-2022-0175?
It affects 2 products.
Linux distribution packages (6)
virglrenderer SUSE:Linux Enterprise Micro 5.0 | All versions | 0.6.0-4.6.1 |
virglrenderer SUSE:Linux Enterprise Module for Server Applications 15 SP3 | All versions | 0.6.0-4.6.1 |
virglrenderer SUSE:Linux Enterprise Server 12 SP5 | All versions | 0.5.0-12.6.1 |
virglrenderer SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 0.5.0-12.6.1 |
virglrenderer SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 0.5.0-12.6.1 |
virglrenderer openSUSE:Leap 15.3 | All versions | 0.6.0-4.6.1 |
Products include Redhat Enterprise Linux, Virglrenderer Project Virglrenderer.
How do I fix CVE-2022-0175?
Apply the vendor's patch.
Is CVE-2022-0175 being exploited?
There is no known exploitation of CVE-2022-0175 in the wild and no public exploit code.
Other vulnerabilities in Redhat Enterprise Linux
- CVE-2018-14667 Red Hat JBoss RichFaces Framework Expression Language Injection
- CVE-2021-20325 Missing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red Hat Enterprise Linux 8.5.0, causes a securit
- CVE-2018-25011 Memory corruption in libwebp
- CVE-2018-25014 Other in libwebp
- CVE-2014-3585 Supply chain in redhat-upgrade-tool
Sources
Also known as AZL-10772, AZL-35347, GHSA-28q3-mx7c-4cc3, OESA-2022-1776, SUSE-SU-2022:0110-1, SUSE-SU-2022:0111-1 and 3 more.