CVE-2026-23008

drm/vmwgfx: Fix KMS with 3D on HW version 10

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix KMS with 3D on HW version 10 HW version 10 does not have GB Surfaces so there is no backing buffer for surface backed FBs. This would result in a nullptr dereference and crash the driver causing a black screen.

Affected

Linux

CVSS v3.1 NVD

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.15% chance of exploitation in the next 30 days, 4th percentile

Published

2026-01-25

Updated

2026-05-11

Proof-of-concept exploits (1)

• George0Papasotiriou/CVE-2026-23008-Solidity-Assembly-Return-Data-Size-Confusion0★ · 2026-08-05

Security advisories

• https://git.kernel.org/stable/c/a91bdd21d5efb3072beefbec13762b7722200c49
• https://git.kernel.org/stable/c/d9186faeae6efb7d0841a5e8eb213ff4c7966614

References

• CVE Record
• NVD entry