Virgil 3d project, used by Quick Emulator(Qemu) to implement 3D GPU support for the virtio GPU, is vulnerable to a null pointer dereference issue. It could occur when a guest invokes a virgl 'VIRGL_CCMD_CLEAR' command. A guest user/process could use this flaw to crash Qemu process resulting in DoS. Upstream patch: --------------- -> https://cgit.freedesktop.org/virglrenderer/commit/?id=48f67f60967f963b698ec8df57ec6912a43d6282 Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/02/08/5
Acknowledgments: Name: Li Qiang (360.cn Inc.)
Created virglrenderer tracking bugs for this issue: Affects: fedora-all [bug 1420249]
CVE assignment: http://seclists.org/oss-sec/2017/q1/348
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.