CVE-2022-0175 is a medium-severity information disclosure vulnerability in the VirGL virtual OpenGL renderer (virglrenderer), affecting Red Hat Enterprise Linux and virglrenderer_project products. The flaw stems from improper memory initialization when allocating host-backed memory, allowing a malicious guest to read uninitialized host memory. This local attack requires low privileges and complexity, with a CVSS score of 5.5. There is no evidence of active exploitation, public exploit code, or significant community discussion or media coverage regarding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
0.9.0CPE matchmatch criteria | cpe:2.3:a:virglrenderer_project:virglrenderer:0.9.0:*:*:*:*:*:*:* | ||
0.9.1CPE matchmatch criteria | cpe:2.3:a:virglrenderer_project:virglrenderer:0.9.1:*:*:*:*:*:*:* | ||
8.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
CVE-2022-0175
Jun 11, 2024A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap from the guest kernel and read this uninitialized memory from the host possibly leading to information disclosure.
Aug 9, 2022virglrenderer: memory initialization issue in vrend_resource_alloc_buffer() can lead to info leak
Dec 14, 2021