{"id":"CVE-2022-38096","revision":"e547a151cf1042818bc968b654d481e6","records":[{"revision":"e547a151cf1042818bc968b654d481e6","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2022-38096","aliases":[],"title":"There is a NULL pointer vulnerability in vmwgfx driver","description":"A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).","state":0,"publishedAt":"2022-09-09T14:39:51.163+00:00","modifiedAt":"2026-10-14T17:30:51.795+00:00","affected":[{"ecosystem":"Vendor product","name":"kernel","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Linux\",\n                    \"product\": \"kernel\",\n                    \"versions\": [\n                        {\n                            \"version\": \"v4.20-rc1\",\n                            \"status\": \"affected\",\n                            \"lessThan\": \"5.13.0-52*\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H","score":6.3,"severity":"MEDIUM"}],"references":["https://bugzilla.openanolis.cn/show_bug.cgi?id=2073","https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-38096","license":"CVE Program Terms of Use","key":"cve-program:CVE-2022-38096","identifiers":["CVE-2022-38096"]},"retained":false,"historicalAffected":[]}],"coverage":[]}