Memory Copy Vulnerability in Linux Kernel Affecting vmwgfx Graphics Driver

CVE-2026-80700

What is CVE-2026-80700?

A vulnerability in the Linux kernel's vmwgfx graphics driver allows unsafe memory copy operations due to improper validation of caller-supplied offsets, strides, and heights. This flaw can lead to significant stability issues and potential security exploits if an attacker tricks a configured CRTC into submitting a crafted atomic commit on an imported framebuffer. The vulnerability stems from a lack of bounds checking, which can cause out-of-bounds memory access during external buffer copy operations. To mitigate the risk, it is essential to validate row-copy endpoints against each buffer object's size and reject invalid parameters such as zero or improperly sized strides.

References