CVE-2022-36402

An integer overflow vulnerability was found in vmwgfx driver in
drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with
device file ‘/dev/dri/renderD128 (or Dxxx)’. This flaw allows a local
attacker with a user account on the system to gain privilege, causing a
denial of service(DoS).

Bugs

• <https://bugzilla.openanolis.cn/show_bug.cgi?id=2072&gt;
• <https://bugzilla.redhat.com/show_bug.cgi?id=2133451&gt;
• <https://bugzilla.suse.com/show_bug.cgi?id=1203517&gt;

Notes