Package: virglrenderer / 0.8.2-5+deb11u1

Metadata

Package Version Patches format
virglrenderer 0.8.2-5+deb11u1 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
CVE 2022 0135.patch | (download)

src/vrend_renderer.c | 3 3 + 0 - 0 !
tests/test_fuzzer_formats.c | 43 43 + 0 - 0 !
2 files changed, 46 insertions(+)

 cve-2022-0135
 An out-of-bounds write issue was found in the VirGL virtual OpenGL
 renderer (virglrenderer). This flaw allows a malicious guest to create a
 specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl,
 leading to a denial of service or possible code execution.