CVE-2022-40133: There is an UAF vulnerability in vmwgfx driver
A use-after-free vulnerability was found in the Linux kernel's vmwgfx driver in vmwexecbuftiecontext. Systems making use of the vmwgfx driver are potentially affected by this flaw. Exploiting the bug would require an attacker to have access to either /dev/dri/card0 or /dev/dri/rendererD128 and be able to issue an ioctl() on the resulting file descriptor. Under certain circumstances a local unprivileged user could use this flaw to crash the system, causing a denial of service.
Reference: https://bugzilla.openanolis.cn/showbug.cgi?id=2075
Other sources
A use-after-free(UAF) vulnerability was found in function 'vmwexecbuftiecontext' in drivers/gpu/vmxgfx/vmxgfxexecbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).
— MITRE
Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by a use-after-free flaw in the vmwexecbuftiecontext function in drivers/gpu/vmxgfx/vmxgfxexecbuf.c. By sending a specially-crafted request, an authenticated attacker could exploit this vulnerability to gain elevated privileges to cause a denial of service condition.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-40133?
CVE-2022-40133 is classified as a high severity vulnerability due to its potential impact and exploitability.
How do I fix CVE-2022-40133?
To fix CVE-2022-40133, update the affected Linux kernel versions to the latest patched release.
Which software components are affected by CVE-2022-40133?
CVE-2022-40133 affects the IBM Security Verify Governance, Identity Manager software, its virtual appliance, and specific versions of the Linux kernel.
What type of vulnerability is CVE-2022-40133?
CVE-2022-40133 is a use-after-free vulnerability found in the vmwgfx driver of the Linux kernel.
What is the potential impact of exploiting CVE-2022-40133?
Exploiting CVE-2022-40133 could allow an attacker with access to certain device files to potentially execute arbitrary code.