CVE-2022-38096

MediumCVSS 5.5/10Last modified Oct 14, 2026

Description

A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
Linux	kernel	>= v4.20-rc1, < 5.13.0-52*
linux	linux_kernel	>= v4.20-rc1, < 5.14
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	< V1.1.1

References

https://bugzilla.openanolis.cn/show_bug.cgi?id=2073Issue Tracking, Permissions Required
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
https://bugzilla.openanolis.cn/show_bug.cgi?id=2073Issue Tracking, Permissions Required
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
https://cert-portal.siemens.com/productcert/html/ssa-265688.html

Timeline

Published: Sep 9, 2022
Last modified: Oct 14, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-380977.8A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurely destroyi CVE-2022-380997.8Improper input validation in BIOS firmware for some Intel(R) NUC 11 Compute Elements before version EBTGL357.0065 may allow a privileged use CVE-2022-38106.5A vulnerability was found in Axiomatic Bento4. It has been classified as problematic. This affects the function AP4_File::AP4_File of the fi CVE-2022-381007.5The CMS800 device fails while attempting to parse malformed network data sent by a threat actor. A threat actor with network access can remo CVE-2022-381017.8Uncontrolled search path in some Intel(R) NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.2105 may allow an aut CVE-2022-381024.4Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may al CVE-2022-381037.8Insecure inherited permissions in the Intel(R) NUC Software Studio Service installer before version 1.17.38.0 may allow an authenticated use CVE-2022-381047.2Auth. WordPress Options Change (siteurl, users_can_register, default_role, admin_email and new_admin_email) vulnerability in Biplob Adhikari CVE-2022-381057.5An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configura CVE-2022-381065.4This vulnerability happens in the web client versions 15.3.0 to Serv-U 15.3.1. This vulnerability affects the directory creation function.CVE-2022-381075.3Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental de CVE-2022-381087.2SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-