CVE-2026-23008

MEDIUM EPSS 3.3%
Published Jan 25, 20265mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Jan 25, 2026 5mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix KMS with 3D on HW version 10 HW version 10 does not have GB Surfaces so there is no backing buffer for surface backed FBs. This would result in a nullptr dereference and crash the driver causing a black screen.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
3.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 10

VendorProductVersionRange
linuxlinux_kernel*≥6.16.1  –  <6.18.7
linuxlinux_kernel6.16any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any

References 2

  • git.kernel.org https://git.kernel.org/stable/c/a91bdd21d5efb3072beefbec13762b7722200c49
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d9186faeae6efb7d0841a5e8eb213ff4c7966614
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/a91bdd21d5efb3072beefbec13762b7722200c49
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d9186faeae6efb7d0841a5e8eb213ff4c7966614
    Patch