Out-of-Bounds Access Vulnerability in Linux Kernel Affecting VMWGFX Driver

CVE-2025-40277

What is CVE-2025-40277?

A vulnerability in the Linux kernel's VMWGFX driver allows for improper validation of command header size, which is derived from user space input. This can lead to buffer offset calculations that may overflow, resulting in potential out-of-bounds access. Such issues can compromise the stability and security of systems using affected kernel versions, emphasizing the need for timely updates and patches.

References