CVE-2026-68446
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
In the Linux kernel, the drm/vmwgfx driver has a vulnerability due to lack of validation of the array_size field in the vmw_surface_metadata structure. This field comes from userspace and should be validated against specific limits depending on the available Shader Model.
Risk Assessment
Lack of validation may lead to incorrect memory allocation or other errors, potentially resulting in system crashes or privilege escalation.
Recommendation
It is recommended to update the Linux kernel to a version containing the fix that adds validation of the array_size field.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw_surface_metadata::array_size This field comes from userspace and should be validated against specific limits depending on which Shader Model (SM) is available.