Cursor Size Limitation Vulnerability in Linux Kernel Graphics Driver by VMware

CVE-2026-80701

What is CVE-2026-80701?

A vulnerability in the Linux kernel graphics driver by VMware allows for oversized mobile (MOB) cursor dimensions, which can lead to unexpected behavior. The drm/vmwgfx driver does not enforce proper boundaries for cursor sizes when using the SVGA_CAP2_CURSOR_MOB update path. This can allow malicious users to request a cursor size that exceeds permitted dimensions, potentially causing system instability. By refining the atomic check for MOB-backed cursor updates, the vulnerability can be mitigated, ensuring that oversized cursor requests are correctly rejected, thus maintaining system integrity.

References