CVE-2022-22942 - The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users

CVE-2022-22942

Summary

The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the system through a dangling 'file' pointer.

References

https://github.com/vmware/photon/wiki/Security-Update-3.0-356
https://github.com/vmware/photon/wiki/Security-Update-4.0-148
https://www.openwall.com/lists/oss-security/2022/01/27/4

Vulnerable Configurations

cpe:2.3:o:vmware:photon_os:4.0:-:*:*:*:*:*:*
cpe:2.3:o:vmware:photon_os:4.0:-:*:*:*:*:*:*
cpe:2.3:o:vmware:photon_os:3.0:-:*:*:*:*:*:*
cpe:2.3:o:vmware:photon_os:3.0:-:*:*:*:*:*:*

CVSS

Base:	None
Impact:
Exploitability:

CWE

CWE-416

CAPEC

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

Last major update

18-12-2023 - 17:27

Published

13-12-2023 - 09:15

Last modified

18-12-2023 - 17:27