VDB
UBUNTU-CVE-2022-36280
UBUNTU-CVE-2022-36280
PUBLISHED
CVSS 7.300000190734863 HIGH
An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).
Risk Scores
CVSS 4.0
7.300000190734863
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:Pro:16.04:LTS | linux-aws-hwe | 4.15.0-1140.151~16.04.1, 4.15.0-1139.150~16.04.1, 4.15.0-1102.109~16.04.1 |
| Ubuntu:20.04:LTS | linux-gke | 5.4.0-1042.44, 0, 5.4.0-1033.35 |
| Ubuntu:18.04:LTS | linux-ibm-5.4 | 5.4.0-1031.35~18.04.1, 5.4.0-1034.38~18.04.1, 5.4.0-1036.41~18.04.1 |
| Ubuntu:18.04:LTS | linux-azure-edge | 5.0.0-1012.12~18.04.2, 0, 4.18.0-1008.8~18.04.1 |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | linux-aws-fips | 4.15.0-2022.22, 4.15.0-2025.25, 4.15.0-2026.26 |
| Ubuntu:20.04:LTS | linux-oem-5.6 | 5.6.0-1056.60, 5.6.0-1033.35, 5.6.0-1034.36 |
| Ubuntu:20.04:LTS | linux-gke-5.15 | 5.15.0-1011.14~20.04.1, 0, 5.15.0-1028.33~20.04.1 |
| Ubuntu:18.04:LTS | linux-azure-5.4 | 5.4.0-1095.101~18.04.1, 0, 5.4.0-1020.20~18.04.1 |
| Ubuntu:22.04:LTS | linux-kvm | 5.13.0-1010.11+22.04.1, 5.15.0-1002.2, 5.15.0-1004.4 |
| Ubuntu:18.04:LTS | linux-oracle | 4.15.0-1053.57, 0, 4.15.0-1007.9 |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | linux-gcp-fips | 5.4.0-1086.94+fips1, 0, 5.4.0-1021.21+fips1 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1023.25, 5.15.0-1024.26, 5.15.0-1025.27 |
| Ubuntu:Pro:16.04:LTS | linux-hwe | 4.15.0-118.119~16.04.1, 4.10.0-35.39~16.04.1, 4.15.0-58.64~16.04.1 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1017.17, 0, 5.15.0-1015.15 |
| Ubuntu:20.04:LTS | linux-oracle-5.11 | 5.11.0-1016.17~20.04.1, 5.11.0-1008.8~20.04.1, 5.11.0-1028.31~20.04.1 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | 5.19.0-41.42~22.04.1, 5.19.0-40.41~22.04.1, 0 |
| Ubuntu:20.04:LTS | linux-riscv-5.11 | 5.11.0-1018.19~20.04.2, 5.11.0-1017.18~20.04.1, 5.11.0-1015.16~20.04.1 |
| Ubuntu:20.04:LTS | linux-gcp-5.11 | 5.11.0-1024.26~20.04.1, 5.11.0-1009.10~20.04.1, 0 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | 5.19.0-1018.19~22.04.1, 0, 5.19.0-1021.22~22.04.1 |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | linux-fips | 5.4.0-1031.36, 5.4.0-1032.37, 5.4.0-1033.38 |
…and 116 more
Timeline
- Sep 9, 2022 CVE Published
- Oct 28, 2026 CVE Updated
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
References
- https://ubuntu.com/security/CVE-2022-36280 report
- https://ubuntu.com/security/notices/USN-5915-1 advisory
- https://ubuntu.com/security/notices/USN-5917-1 advisory
- https://ubuntu.com/security/notices/USN-5924-1 advisory
- https://ubuntu.com/security/notices/USN-5927-1 advisory
- https://ubuntu.com/security/notices/USN-5934-1 advisory
- https://ubuntu.com/security/notices/USN-5939-1 advisory
- https://ubuntu.com/security/notices/USN-5940-1 advisory
- https://ubuntu.com/security/notices/USN-5951-1 advisory
- https://ubuntu.com/security/notices/USN-5975-1 advisory
- https://ubuntu.com/security/notices/USN-5976-1 advisory
- https://ubuntu.com/security/notices/USN-5981-1 advisory
- https://ubuntu.com/security/notices/USN-5982-1 advisory
- https://ubuntu.com/security/notices/USN-5984-1 advisory
- https://ubuntu.com/security/notices/USN-5987-1 advisory
- https://ubuntu.com/security/notices/USN-5991-1 advisory
- https://ubuntu.com/security/notices/USN-6000-1 advisory
- https://ubuntu.com/security/notices/USN-6001-1 advisory
- https://ubuntu.com/security/notices/USN-6004-1 advisory
- https://ubuntu.com/security/notices/USN-6009-1 advisory
…and 8 more