CVE:CVE-2022-0135
CNNVD:CNNVD-202202-1415
virglrenderer是一款VirGL虚拟OpenGL渲染器。
Virglrenderer 中存在缓冲区错误漏洞，该漏洞源于产品的read_transfer_data函数未能正确处理内存边界。攻击者可通过该漏洞触发拒绝服务，并可能运行代码。
solution:Upgrade virglrenderer_project virglrenderer to a higher version than 0.10.0,and avoid the version [0.8.1,0.10.0); Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0