CVE-2026-68446

HIGH

drm/vmwgfx: Validate vmw_surface_metadata::array_size

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-68446 has a selected CVSS score of 7.8 (high).

Description

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw_surface_metadata::array_size This field comes from userspace and should be validated against specific limits depending on which Shader Model (SM) is available.

Description source: CVE List

Affected products and versions

2
ProductSourceVersion range

Linux

Browse Linux / Linux

Default status: unaffected, affected

CVE List504901dbb0b565fcbe466b0c56f3131586df5afd to < 5ff94e1279176b539d451e3e754fdcbd1a8d520aaffected
504901dbb0b565fcbe466b0c56f3131586df5afd to < 71779fe8bf403a9b3e28dc59229fa556db32d35daffected
504901dbb0b565fcbe466b0c56f3131586df5afd to < b1379f0c42b88cb60b9f3757eb5d1e73ad460ed8affected
504901dbb0b565fcbe466b0c56f3131586df5afd to < 6910ccaf41678f7761ba2e57d72b77d056320b4daffected
504901dbb0b565fcbe466b0c56f3131586df5afd to < a4f55260f7f7d4dc4d0ee55063dfb0c457b77991affected
5.7affected
Before 5.7unaffected
6.6.148 to ≤ 6.6.*unaffected
6.12.101 to ≤ 6.12.*unaffected
6.18.42 to ≤ 6.18.*unaffected
7.1.6 to ≤ 7.1.*unaffected
7.2-rc5 to ≤ *unaffected

Kernel

Browse Linux / Kernel
OSV5.7.0 to < 6.6.148 · Fixed in 6.6.148affected
6.7.0 to < 6.12.101 · Fixed in 6.12.101affected
6.13.0 to < 6.18.42 · Fixed in 6.18.42affected
6.19.0 to < 7.1.6 · Fixed in 7.1.6affected

References

8