CVE-2022-0135: Debian Linux

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl, leading to a denial of service or possible code execution.

Affected products

• Debian Debian Linux: version 10.0 only
• Red Hat Enterprise Linux: version 8.0 only
• Virglrenderer Project Virglrenderer: from 0.8.1, before 0.10.0 (fixed in 0.10.0)

Published 2022-08-25. Last modified 2026-06-17.