{"affected":[{"product":"kernel","source":"CNA: Anolis","vendor":"Linux","versions":[{"lessThan":"5.13.0-52*","status":"affected","version":"v3.2-rc1","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V1.1","status":"affected","version":"0","versionType":"custom"}]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"5.13.0-52","versionStartIncluding":"3.2","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"cveId":"CVE-2022-36280","cwes":["CWE-120","CWE-787"],"description":"An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).","epss":{"date":"2026-11-02","percentile":0.56088,"score":0.00785},"exploits":[],"kev":null,"metrics":[{"score":6.3,"severity":"medium","source":"CNA: Anolis","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H","version":"3.1"},{"score":5.5,"severity":"medium","source":"NVD: nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},{"score":6.3,"severity":"medium","source":"NVD: security@openanolis.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H","version":"3.1"}],"modifiedAt":1793661431273,"publishedAt":1662734390986,"references":[{"source":"CNA: Anolis","tags":[],"url":"https://bugzilla.openanolis.cn/show_bug.cgi?id=2071"},{"source":"CNA: Anolis","tags":["vendor-advisory"],"url":"https://www.debian.org/security/2023/dsa-5324"},{"source":"CNA: Anolis","tags":["mailing-list"],"url":"https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html"},{"source":"CNA: Anolis","tags":["mailing-list"],"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://bugzilla.openanolis.cn/show_bug.cgi?id=2071"},{"source":"ADP: CVE","tags":["vendor-advisory","x_transferred"],"url":"https://www.debian.org/security/2023/dsa-5324"},{"source":"ADP: CVE","tags":["mailing-list","x_transferred"],"url":"https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html"},{"source":"ADP: CVE","tags":["mailing-list","x_transferred"],"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"source":"security@openanolis.org","tags":["Issue Tracking","Permissions Required","Third Party Advisory"],"url":"https://bugzilla.openanolis.cn/show_bug.cgi?id=2071"},{"source":"security@openanolis.org","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html"},{"source":"security@openanolis.org","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"},{"source":"security@openanolis.org","tags":["Third Party Advisory"],"url":"https://www.debian.org/security/2023/dsa-5324"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Permissions Required","Third Party Advisory"],"url":"https://bugzilla.openanolis.cn/show_bug.cgi?id=2071"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.debian.org/security/2023/dsa-5324"},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"remediation":[],"revision":"114f8283cd4431971e5ae996e9c400b8307261850685362347cd3376bb770603","sources":[{"modifiedAt":1793657549820,"name":"CNA: Anolis","retrievedAt":1793660907175,"url":"https://www.cve.org/CVERecord?id=CVE-2022-36280"},{"modifiedAt":1793661431273,"name":"NVD","retrievedAt":1793665062484,"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36280"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793660908067,"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-36280"}],"ssvc":{"assessedAt":1791493164018,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"There is an out-of-bounds write vulnerability in vmwgfx driver","updatedAt":1793665062484}