Use-After-Free Vulnerability in Linux Kernel's vmwgfx Driver - CVE-2022-38457
Summary
CVE-2022-38457: A use-after-free(UAF) vulnerability was found in function 'vmw_cmd_res_check' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services and managing hardware resources. The vmwgfx driver is specifically designed for VMware graphics devices, enabling efficient rendering and display functionalities. This driver is crucial for users running virtual machines that require graphical output. However, a use-after-free vulnerability has been identified in the vmwgfx driver, which could potentially allow local attackers to exploit this flaw.
Vulnerability Detail
CVE-2022-38457 is a use-after-free (UAF) vulnerability located in the 'vmw_cmd_res_check' function within the vmwgfx driver. This flaw arises when the driver improperly manages memory, allowing an attacker with local user privileges to exploit the vulnerability. The ramifications include privilege escalation, which could lead to a denial of service (DoS) condition, disrupting system stability and availability. The vulnerability affects systems running Debian versions 11, 12, and 13, with specific kernel versions being susceptible to this issue.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can limit access to the affected device file '/dev/dri/renderD128' by modifying permissions or using access control lists (ACLs) to restrict unauthorized users from accessing the graphics device. This can be done with the following command:
sudo chmod 600 /dev/dri/renderD128
Conclusion
CVE-2022-38457 represents a significant security risk within the Linux kernel's vmwgfx driver, allowing local attackers to exploit a use-after-free vulnerability. Users are advised to update their systems promptly to mitigate this risk and ensure continued system stability and security.
See every vulnerability recorded for linux →
FAQ
CVE-2022-38457 is a use-after-free vulnerability in the vmwgfx driver of the Linux kernel, which can lead to privilege escalation and denial of service.
The vulnerability affects Debian versions 11, 12, and 13 running the Linux kernel with specific versions that have not been patched.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The CVSS score for CVE-2022-38457 is 5.5, indicating a moderate severity level.
If immediate updates are not possible, consider applying the workaround by restricting access to the affected device file to mitigate potential exploitation.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
