Description
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping.
References8
- git.kernel.org/stable/c/073437615a8da528935146ca6a17292c0ca8ce19
- git.kernel.org/stable/c/21bc51cb89ced74d6645a138cc2f21184bc75094
- git.kernel.org/stable/c/76e5ddd7d9822c8c3492e0f50ba8978e093069ad
- git.kernel.org/stable/c/cbf7616464334b217ed07b8adacaed549f2a9433
- git.kernel.org/stable/c/db6fbc2b77849e3c3c2bc115ea9ac925c4625a0d
- git.kernel.org/stable/c/f54b41644744f72c86e44a21733ac6fc910ca133
- git.kernel.org/stable/c/f6d9c8abdf06a9c7efa799532d66ed8d5a50734c
- git.kernel.org/stable/c/fcb137f6e7ed769f7ecad84364a33c451371b602
Metrics
- CVSS 3.1
-
7.8
HIGH
Score source: CNA
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 0% percentile: 6 · as of 8 November 2026
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.