CVE-2022-38096
Aliases:UBUNTU-CVE-2022-38096DEBIAN-CVE-2022-38096CGA-26hr-93qc-g49hCGA-277v-3c64-2m5vCGA-29w9-6w4m-8v4pCGA-2fcx-vpv9-mj87CGA-2grr-vvxf-h3wpCGA-2qpq-qh66-5pgjCGA-2qq9-p9jp-5jp9CGA-33jj-rrj2-6v65CGA-3p44-hjxm-7jf6CGA-3r76-h82f-7gxmCGA-3v93-q2f5-8f8pCGA-3vh3-fg2h-87cvCGA-3x2v-6jq2-w5whCGA-3xw7-rpj8-762mCGA-437v-q5cq-q23cCGA-474m-6wvv-x7gxCGA-47mx-5rvw-fhxhCGA-4c4q-xcm5-qg2wCGA-4gq6-ch7m-9rr3CGA-4j2w-whw4-xjjhCGA-4q78-ccch-w2q5CGA-4xj3-h32f-22m5CGA-53wq-hrf5-p3m3CGA-54m9-g8f8-gj7vCGA-5j8m-jmj8-c899CGA-5jw9-8hwh-8xjpCGA-5p49-6jf8-jj7pCGA-5qhr-9w74-mpm3CGA-5w3w-xfqq-fj7cCGA-6f39-6mxj-qpxrCGA-6qvf-xfvq-cxw8CGA-6r32-c5mg-69jwCGA-6vwv-9hwp-wrfvCGA-75q7-hj4f-6qr4CGA-7x56-qw2x-jx2pCGA-84xg-436p-w628CGA-85j3-w8hf-wf39CGA-878c-jrv2-x8hqCGA-8cwr-qvxv-2j52CGA-8jv3-rffq-j7j3CGA-8jv6-4ffp-rgj4CGA-8ww2-r27m-5wgcCGA-8xhr-5vwx-2mxpCGA-9968-6xfj-525pCGA-9gh7-jf4g-vwxrCGA-9gv7-q2pw-p2wcCGA-9gx8-9xh8-m4q4CGA-9p5j-qr95-qpp3CGA-9vw7-2cpm-r833CGA-c7r4-qr96-c48wCGA-c8f2-4q9r-8xh5CGA-cc95-7frf-gv43CGA-cm6x-36g8-c733CGA-cpmm-82jc-95mgCGA-cr3x-5vh6-4xgrCGA-f2rg-45w9-qpccCGA-f3qp-39jj-9rcfCGA-f973-6p23-v4hwCGA-f9m9-m52g-378mCGA-fjh3-gj34-758gCGA-fjxj-mf54-x3q6CGA-fwhv-9p38-hcp8CGA-g6hq-9h56-mm8hCGA-gfpg-x6hp-9w89CGA-ggr7-86ch-q6c4CGA-gj89-7jj3-9gxrCGA-gp29-9958-fm5xCGA-gvqr-pj4m-9pwmCGA-h2h8-rhw9-wpwrCGA-h47r-2h45-px34CGA-h7vg-gh7f-v4jqCGA-hh85-w4fp-28wpCGA-hjqc-h8qj-v8f7CGA-hmg7-3wfj-cpfqCGA-hv8f-w46x-x22rCGA-j3j7-x7xx-24f7CGA-j3jh-gh8h-j3c8CGA-j3rq-3vwm-78gwCGA-jh3v-pc58-vgfqCGA-jm57-xv7x-27ghCGA-jv97-7xjp-3qrcCGA-jxmh-gx8x-vrh5CGA-mc75-h3p4-v762CGA-mcm3-j8j2-xp3gCGA-mfj9-9jq5-gwxwCGA-mvq9-x48w-q632CGA-mwg4-jgr4-rj8jCGA-p3cx-qm7m-3732CGA-p4jw-9vx5-rfg2CGA-pf87-2rm7-qq39CGA-phw5-7rv4-jf9cCGA-pp7w-8cvh-v587CGA-pwc3-7367-wjv4CGA-q65v-xhxx-63f6CGA-q956-vc6h-4fjwCGA-qcqp-m769-9vmpCGA-qgxg-fxmx-c7qmCGA-qrqq-rv59-pfwqCGA-qwh7-h962-73ccCGA-r4cm-36f7-mhxfCGA-r5h5-2xr8-r58fCGA-v2gx-rx8w-6mj4CGA-vqmw-83h5-5fw8CGA-w5r7-9gw5-c3x2CGA-w62h-v3hr-pqvhCGA-wchx-cmv4-mvm7CGA-wggg-83x5-v82hCGA-wp3q-9qgh-9m3rCGA-x3wc-8xj8-c22vCGA-x6c3-39rw-jhg4CGA-x865-6gr5-2rg6CGA-xgcg-9h6j-fgp3CGA-xj56-3h8p-m9qfCGA-xvmr-4mf6-qv3gCGA-3xj5-x5wg-j6vgCGA-6jqp-2x23-5vpqCGA-42qm-qrc4-r59cCGA-4gh9-56v9-9v83CGA-5c8v-cmhc-qvrhCGA-5v5m-gq72-3j5qCGA-82rv-578h-h284CGA-9643-vrpj-439hCGA-964m-8j3p-c7cwCGA-c627-5927-gchvCGA-c8m2-8hj9-5r99CGA-hrc2-f7rp-rvvmCGA-mcvx-55jq-f3c5CGA-p8cf-6q5x-rmg7CGA-xc3f-4wwq-cw33CGA-55rq-83g9-782hCGA-xppc-2mmm-89xmCGA-489w-jvvc-xw7pCGA-49rw-fjc3-5r9gCGA-mrxq-mp35-8jj7CGA-mx4x-h5r7-7mg9CGA-pfw3-8vvx-5723CGA-8c87-88pw-2pwmCGA-3mfm-ppcc-r2wmCGA-886c-2vfr-r6r5CGA-c936-5h8q-fm76
Advisory lineage Upstream: 0 Downstream: 53
Modified
Published: 09 Sept 2022, 14:39
Last modified:12 May 2026, 10:12
Vulnerability Summary
Overall Risk (default)
medium
25/100 CVSS Score
6.3 MEDIUM
v3.1 (cve.org)
EPSS Score
0.78% LOW
1% probability +0.76%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
09 Sept 2022, 14:39
Published
Vulnerability first disclosed
12 May 2026, 10:12
Last Modified
Vulnerability information updated
Description
A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).
CVSS Metrics
- v3.1•MEDIUM•Score: 6.3CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H
- v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Trends
Current EPSS score: 0.78%• Percentile: 54%
Techniques & Countermeasures
- CWE-476•NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Systems
- chainguard•hyperv-daemons-6.18
< 0
- chainguard•hyperv-daemons-generic
< 0
- chainguard•linux-aws-6.12
< 0 | < 6.12.65-r0
- chainguard•linux-aws-6.12-boot-installed
< 0
- chainguard•linux-aws-6.12-fips-boot-installed
< 0
- chainguard•linux-aws-6.12-headers
< 0
- chainguard•linux-aws-6.12-modules
< 0
- chainguard•linux-aws-6.18
< 6.18.10-r0 | < 0
- chainguard•linux-aws-6.18-boot-installed
< 0
- chainguard•linux-aws-6.18-fips-boot-installed
< 0
- chainguard•linux-aws-6.18-headers
< 0
- chainguard•linux-aws-6.18-modules
< 0
- chainguard•linux-aws-generic
< 6.18.5-r0 | < 0
- chainguard•linux-aws-generic-boot-installed
< 0
- chainguard•linux-aws-generic-fips-boot-installed
< 0
- chainguard•linux-aws-generic-headers
< 0
- chainguard•linux-aws-generic-modules
< 0
- chainguard•linux-azure-6.12
< 0 | < 6.12.65-r1
- chainguard•linux-azure-6.18
< 0
- chainguard•linux-azure-6.18-boot-installed
< 0
- chainguard•linux-azure-6.18-fips-boot-installed
< 0
- chainguard•linux-azure-6.18-headers
< 0
- chainguard•linux-azure-6.18-modules
< 0
- chainguard•linux-azure-generic
< 6.18.5-r0 | < 0
- chainguard•linux-azure-generic-boot-installed
< 0
- chainguard•linux-azure-generic-fips-boot-installed
< 0
- chainguard•linux-azure-generic-headers
< 0
- chainguard•linux-azure-generic-modules
< 0
- chainguard•linux-desktop-6.18
all
- chainguard•linux-desktop-6.18-bootc
all
- chainguard•linux-desktop-6.18-bootc-boot-installed
all
- chainguard•linux-desktop-6.18-headers
all
- chainguard•linux-desktop-6.18-modules
all
- chainguard•linux-desktop-7.2
all
- chainguard•linux-desktop-7.2-bootc
all
- chainguard•linux-desktop-7.2-headers
all
- chainguard•linux-desktop-7.2-modules
all
- chainguard•linux-firecracker-6.18
all
- chainguard•linux-gcp-6.12
< 6.12.65-r0 | < 0
- chainguard•linux-gcp-6.18
< 6.18.10-r0 | < 0
- chainguard•linux-gcp-6.18-boot-installed
< 0
- chainguard•linux-gcp-6.18-fips-boot-installed
< 0
- chainguard•linux-gcp-6.18-headers
< 0
- chainguard•linux-gcp-6.18-modules
< 0
- chainguard•linux-gcp-generic
< 6.18.5-r0 | < 0
- chainguard•linux-gcp-generic-boot-installed
< 0
- chainguard•linux-gcp-generic-fips-boot-installed
< 0
- chainguard•linux-gcp-generic-headers
< 0
- chainguard•linux-gcp-generic-modules
< 0
- chainguard•linux-qemu-6.12
< 6.12.71-r0
Showing first 50 affected entries in server-rendered view.
References (26)
- https://bugzilla.openanolis.cn/show_bug.cgi?id=2073
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://ubuntu.com/security/CVE-2022-38096
- https://www.cve.org/CVERecord?id=CVE-2022-38096
- https://gitee.com/anolis/cloud-kernel/pulls/3040/
- https://ubuntu.com/security/notices/USN-6816-1
- https://ubuntu.com/security/notices/USN-6817-1
- https://ubuntu.com/security/notices/USN-6817-2
- https://ubuntu.com/security/notices/USN-6817-3
- https://ubuntu.com/security/notices/USN-6878-1
- https://ubuntu.com/security/notices/USN-6898-1
- https://ubuntu.com/security/notices/USN-6898-2
- https://ubuntu.com/security/notices/USN-6898-3
- https://ubuntu.com/security/notices/USN-6898-4
- https://ubuntu.com/security/notices/USN-6917-1
- https://ubuntu.com/security/notices/USN-6919-1
- https://ubuntu.com/security/notices/USN-6927-1
- https://ubuntu.com/security/notices/USN-7019-1
- https://ubuntu.com/security/notices/USN-7173-1
- https://ubuntu.com/security/notices/USN-7173-2
- https://ubuntu.com/security/notices/USN-7195-1
- https://ubuntu.com/security/notices/USN-7195-2
- https://ubuntu.com/security/notices/USN-7173-3
- https://ubuntu.com/security/notices/USN-7413-1
- https://security-tracker.debian.org/tracker/CVE-2022-38096