Back to bug 2039003

Who When What Removed Added
Pedro Sampaio 2022-01-10 17:52:24 UTC CC security-response-team
Pedro Sampaio 2022-01-10 17:53:03 UTC Summary EMBARGOED virglrenderer: Missing initialization of res->ptr EMBARGOED CVE-2022-0175 virglrenderer: Missing initialization of res->ptr
Alias CVE-2022-0175
Pedro Sampaio 2022-01-10 17:53:56 UTC Blocks 2039004
Pedro Sampaio 2022-01-10 17:54:50 UTC Blocks 2039007
Pedro Sampaio 2022-01-11 14:22:25 UTC Summary EMBARGOED CVE-2022-0175 virglrenderer: Missing initialization of res->ptr CVE-2022-0175 virglrenderer: Missing initialization of res->ptr
Group security, qe_staff
Pedro Sampaio 2022-01-11 14:22:39 UTC Depends On 2039342, 2039343
Mauro Matteo Cascella 2022-01-31 10:59:39 UTC Summary CVE-2022-0175 virglrenderer: Missing initialization of res->ptr CVE-2022-0175 virglrenderer: memory initialization issue in vrend_resource_alloc_buffer() can lead to info leak
Mauro Matteo Cascella 2022-01-31 11:19:57 UTC CC virt-maint
Mauro Matteo Cascella 2022-01-31 11:51:26 UTC Depends On 2048503, 2048504
Mauro Matteo Cascella 2022-01-31 14:19:44 UTC Doc Text A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could issue a DRM_IOCTL_VIRTGPU_RESOURCE_CREATE ioctl and use this flaw to leak data from the host.
Mauro Matteo Cascella 2022-01-31 15:32:26 UTC Doc Text A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could issue a DRM_IOCTL_VIRTGPU_RESOURCE_CREATE ioctl and use this flaw to leak data from the host. A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap and read this uninitialized memory from the host, possibly leading to information disclosure.
RaTasha Tillery-Smith 2022-02-01 13:56:08 UTC Doc Text A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap and read this uninitialized memory from the host, possibly leading to information disclosure. A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap from the guest kernel and read this uninitialized memory from the host, possibly leading to information disclosure.
Red Hat Bugzilla 2023-07-07 08:31:12 UTC Assignee security-response-team nobody
CC security-response-team

Back to bug 2039003