CVE-2022-40133

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A use-after-free(UAF) vulnerability was found in function 'vmw_execbuf_tie_context' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Sep 9, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-401344.4An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access andCVE-2022-401354.4An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and CVE-2022-401364.4An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker wiCVE-2022-401376.7A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arCVE-2022-401389.8An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, could have been used toCVE-2022-401397.2Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients CVE-2022-40144.3A vulnerability, which was classified as problematic, has been found in FeehiCMS. Affected by this issue is some unknown functionality of thCVE-2022-401405.5An origin validation error vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to cause a denial-ofCVE-2022-401417.5A vulnerability in Trend Micro Apex One and Apex One as a Service could allow an attacker to intercept and decode certain communication striCVE-2022-401427.8A security link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service agents coulCVE-2022-401437.3A link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service servers could allow CVE-2022-401449.8A vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service could allow an attacker to bypass the product's login authenti
CVE-2022-40133: Medium severity, CVSS 5.5 | Vulnix