There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw
    allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER
    ioctl, leading to a denial of service or possible code execution. (CVE-2022-0135)

  - A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly
    initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to
    mmap from the guest kernel and read this uninitialized memory from the host, possibly leading to
    information disclosure. (CVE-2022-0175)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5309-1 advisory.

    It was discovered that virglrenderer incorrectly handled memory. An attacker inside a guest could use this     issue to cause virglrenderer to crash, resulting in a denial of service, or possibly execute arbitrary     code. (CVE-2022-0135)

    It was discovered that virglrenderer incorrectly initialized memory. An attacker inside a guest could     possibly use this issue to obtain sensitive host information. (CVE-2022-0175)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0111-1 advisory.

  - A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly     initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to     mmap from the guest kernel and read this uninitialized memory from the host, possibly leading to     information disclosure. (CVE-2022-0175)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly     initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to     mmap from the guest kernel and read this uninitialized memory from the host, possibly leading to     information disclosure. (CVE-2022-0175)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061525 advisory.

    A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly     initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to     mmap from the guest kernel and read this uninitialized memory from the host, possibly leading to     information disclosure.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0110-1 advisory.

    - CVE-2022-0175: Fixed missing initialization of res->ptr (bsc#1194601).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202210-05 (virglrenderer: Multiple vulnerabilities)

  - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw     allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER     ioctl, leading to a denial of service or possible code execution. (CVE-2022-0135)

  - A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly     initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to     mmap from the guest kernel and read this uninitialized memory from the host, possibly leading to     information disclosure. (CVE-2022-0175)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0111-1 advisory.

    - CVE-2022-0175: Fixed missing initialization of res->ptr (bsc#1194601).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of virglrenderer installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-0175 advisory.

  - A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly     initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to     mmap from the guest kernel and read this uninitialized memory from the host, possibly leading to     information disclosure. (CVE-2022-0175)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
426672	Alpine: multiple virglrenderer packages: security update to 0.10.3-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	5/16/2025	7/2/2026	high
426672	Alpine: multiple virglrenderer packages: security update to 0.10.3-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	5/16/2025	7/2/2026	high
158458	Ubuntu 20.04 LTS : virglrenderer vulnerabilities (USN-5309-1)	Nessus	Ubuntu Local Security Checks	2/28/2022	8/29/2024	high
156844	openSUSE 15 Security Update : virglrenderer (openSUSE-SU-2022:0111-1)	Nessus	SuSE Local Security Checks	1/19/2022	3/21/2023	medium
229827	Linux Distros Unpatched Vulnerability : CVE-2022-0175	Nessus	Misc.	3/5/2025	9/2/2026	medium
341251	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: virglrenderer (UTSA-2026-061525)	Nessus	Unity Linux Local Security Checks	8/28/2026	8/28/2026	medium
156810	SUSE SLES12 Security Update : virglrenderer (SUSE-SU-2022:0110-1)	Nessus	SuSE Local Security Checks	1/19/2022	6/26/2026	medium
166165	GLSA-202210-05 : virglrenderer: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	10/16/2022	10/9/2023	high
156815	SUSE SLES15 Security Update : virglrenderer (SUSE-SU-2022:0111-1)	Nessus	SuSE Local Security Checks	1/19/2022	6/26/2026	medium
173510	CBL Mariner 2.0 Security Update: virglrenderer (CVE-2022-0175)	Nessus	MarinerOS Local Security Checks	3/28/2023	3/28/2023	medium

Detections

Analytics

Plugins Search

high

high

high

medium

medium

medium

medium

high

medium

medium