CVE-2022-38457: There is an UAF vulnerability in vmwgfx driver
A use-after-free vulnerability was found in the Linux kernel's vmwgfx driver in vmwcmdrescheck. Systems making use of the vmwgfx driver are potentially affected by this flaw. Exploiting the bug would require an attacker to have access to either /dev/dri/card0 or /dev/dri/rendererD128 and be able to issue an ioctl() on the resulting file descriptor. Under certain circumstances a local unprivileged user could use this flaw to crash the system, causing a denial of service.
Reference: https://bugzilla.openanolis.cn/showbug.cgi?id=2074
Other sources
A use-after-free(UAF) vulnerability was found in function 'vmwcmdrescheck' in drivers/gpu/vmxgfx/vmxgfxexecbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).
— MITRE
Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by a use-after-free flaw in the vmwcmdrescheck function in drivers/gpu/vmxgfx/vmxgfxexecbuf.c. By sending a specially-crafted request, an authenticated attacker could exploit this vulnerability to gain elevated privileges to cause a denial of service condition.
— IBM
There is an UAF vulnerability in vmwgfx driver
— Microsoft
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-38457?
CVE-2022-38457 is classified as a use-after-free vulnerability which can lead to potential system exploitation.
How do I fix CVE-2022-38457?
To fix CVE-2022-38457, you should upgrade to a patched version of the Linux kernel or the affected IBM Security Verify Governance software components.
Which systems are affected by CVE-2022-38457?
CVE-2022-38457 affects systems utilizing the Linux kernel with vmwgfx driver and also IBM Security Verify Governance components up to version 10.0.2.
What can an attacker achieve by exploiting CVE-2022-38457?
An attacker exploiting CVE-2022-38457 could potentially execute arbitrary code with elevated privileges on the affected system.
What versions of the Linux kernel are affected by CVE-2022-38457?
CVE-2022-38457 affects Linux kernel versions between 4.20 and 6.1.7, as well as specific release candidates of version 6.2.