789 matches found
SUSE CVE-2026-99002
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping...
DEBIAN-CVE-2026-99002
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping...
CVE-2026-99002
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping...
CVE-2026-99002
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping...
EUVD-2026-108796
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping...
CVE-2026-99002 drm/vmwgfx: validate pitch coming from userspace
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping...
CVE-2026-99002 drm/vmwgfx: validate pitch coming from userspace
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping...
CVE-2026-99002
The Linux kernel contains a vulnerability in the drm/vmwgfx component where the system fails to properly validate the pitch provided from userspace. This lack of validation, alongside box dimensions, when copying data from the underlying surface, can lead to out-of-bounds reads during cursor snoo...
kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound
A flaw was found in the drm/vmwgfx component of the Linux kernel. An integer overflow vulnerability exists in the vmwshaderdefine function due to improper validation of user-supplied shader window size and offset. When the offset value is close to its maximum, an unsigned addition can wrap around...
Linux Distros Unpatched Vulnerability : CVE-2026-99002
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes...
CVE-2026-80888
A flaw was found in the drm/vmwgfx component of the Linux kernel. An unprivileged client can exploit this vulnerability by passing a specially crafted file descriptor fd to the DRMVMWGBSURFACEREF or DRMVMWGBSURFACEREFEXT paths. This can lead to a dmabuf reference leak, causing resource exhaustion...
Siemens SIMATIC S7-1500 TM MFP Detection of Error Condition Without Action (CVE-2026-23317)
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Return the correct value in vmwtranslateptr functions Before the referenced fixes these functions used a lookup function that returned a pointer. This was changed to another lookup function that returned an error code...
Oracle Linux 8 : kernel (ELSA-2026-82807)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-82807 advisory. - drm/amdkfd: Add TLB flush after MES queue eviction/suspension Jocelyn Falempe RHEL-262108 CVE-2026-89811 - drm/amd/display: set newstream to NULL...
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1, Linux, Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: drm/vmwgfx: Fixed a deadlock in DMA buffer fence polling. A new version of the fence operations was introduced, which, upon release, does not remove the fences from the pending list. This eliminates the need for a lock to...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: The size of the bound DMA command body was incorrect when calculating the suffix pointer. The vmwcmddma function determines the DMA suffix as follows: unsigned long &cmd-body + header-size - sizeofsuffix Without...
Astra Linux – Vulnerability in Linux, Linux 5.10
The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the system through a dangling ‘file’ pointer...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
An integer overflow vulnerability was discovered in the vmwgfx driver, located in the vmxgfxexecbuf.c file within the GPU component of the Linux kernel. The vulnerability affects device files such as '/dev/dri/renderD128 or Dxxx'. This flaw allows a local attacker with a user account on the syste...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: The size of the DRAWPRIMITIVES header is validated before division is performed. The vmwcmddraw function calculates: maxnum = header-size - sizeofcmd-body / sizeofdecl; where header-size is of type u32 and is directly...
kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound
A flaw was found in the drm/vmwgfx component of the Linux kernel. An integer overflow vulnerability exists in the vmwshaderdefine function due to improper validation of user-supplied shader window size and offset. When the offset value is close to its maximum, an unsigned addition can wrap around...
kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound
A flaw was found in the drm/vmwgfx component of the Linux kernel. An integer overflow vulnerability exists in the vmwshaderdefine function due to improper validation of user-supplied shader window size and offset. When the offset value is close to its maximum, an unsigned addition can wrap around...