Dashboard / CVE-2022-36280

CVE-2022-36280

MEDIUM
MEDIUM Priority: 0.04 BB Relevance: 36/100
Published: 2022-09-09 Modified: 2026-11-02 First seen: 2026-11-02 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).

Weakness Classification (2)

Affected Software (3)

VendorProductVersion
Linux kernel v3.2-rc1 < 5.13.0-52*
debian debian_linux 11.0
linux linux_kernel 3.2 – 5.13.0-52

References & Advisories (5)

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.79%
Raw Score 0.007940
Percentile 56.6%
Date 2026-11-06

EPSS Trend

2026-11-06
0.00794
2026-11-05
0.00794
2026-11-04
0.00794
2026-11-03
0.00794
2026-11-02
0.00785

Intelligence Sources

mitre ref →
nvd ref →

External Links