← back
CVE-2022-38096

There is a NULL pointer vulnerability in vmwgfx driver

CVSS 6.3 MEDIUMEPSS 0.6%CWE-476
A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H
Affected products
Linux · kernel

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →