Live › vulnerability › CVE-2026-99002
Go to dashboardThe VMware graphics (vmwgfx) driver in the Linux kernel did not validate the pitch value supplied by userspace before copying surface data. A local process can trigger out-of-bounds reads during cursor snooping.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel with the vmwgfx DRM driver, typically VMware virtual machines using the virtual GPU. The sources do not say which kernel versions are fixed or whether the driver is loaded by default.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: validate pitch coming from userspace
Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping.
This page as .md · .json · in your agent: get_signal("CVE-2026-99002")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.