Vulnerability in Linux Kernel Affecting Graphics Driver Management by VMware

CVE-2026-23317

What is CVE-2026-23317?

A vulnerability exists in the Linux Kernel's graphics driver management related to the vmw_translate_ptr functions. The functions previously relied on a lookup that returned a pointer, which changed to a method returning an error code with the pointer as an out parameter. However, the error path was not updated accordingly, leading to the potential for these functions to signal success despite actual failures, ultimately resulting in uninitialized pointer dereferences and out-of-bounds memory accesses. This flaw can compromise system stability and security, underlining the need for prompt updates and mitigations.

References