CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2022-0175 – Ubuntu Security Notice USN-5309-1
https://notcve.org/view.php?id=CVE-2022-0175
01 Mar 2022 — A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap from the guest kernel and read this uninitialized memory from the host, possibly leading to information disclosure. Se encontró un fallo en VirGL virtual OpenGL renderer (virglrenderer). El virgl no inicializaba apropiadamente la memoria cuando asignaba un recurso de memoria respaldado por el host. • https://access.redhat.com/security/cve/CVE-2022-0175 • CWE-909: Missing Initialization of Resource •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2022-0135 – Ubuntu Security Notice USN-5309-1
https://notcve.org/view.php?id=CVE-2022-0135
01 Mar 2022 — An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl, leading to a denial of service or possible code execution. Se ha encontrado un problema de escritura fuera de límites en el renderizador virtual OpenGL de VirGL (virglrenderer). Este defecto permite a un invitado malicioso crear un recurso virgil especialmente diseñado y luego emitir un ioctl V... • https://bugzilla.redhat.com/show_bug.cgi?id=2037790 • CWE-787: Out-of-bounds Write •