Bug 2432675 (CVE-2026-23008)
| Summary: | CVE-2026-23008 kernel: drm/vmwgfx: Fix KMS with 3D on HW version 10 | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | low | Docs Contact: | |
| Priority: | low | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A NULL pointer dereference vulnerability was found in the Linux kernel's VMware graphics (vmwgfx) driver. On VMware hardware version 10, which lacks GB Surfaces support, attempting to use 3D acceleration with KMS (Kernel Mode Setting) causes the driver to dereference a NULL backing buffer pointer for surface-backed framebuffers. This results in a kernel crash and black screen.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-01-25 15:02:52 UTC
|