This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-10214 →

DEBIAN-CVE-2016-10214

Memory leak in the virgl_resource_attach_backing function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (memo...

Original description

The description as published by the source.

Memory leak in the virgl_resource_attach_backing function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 virglrenderer

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-1"}]}]

Debian:13 virglrenderer

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-1"}]}]

Debian:14 virglrenderer

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-1"}]}]

References

advisory security-tracker.debian.org