Vulnerability in Linux Kernel Affecting Memory Management Functionality

CVE-2026-80702

What is CVE-2026-80702?

A vulnerability in the Linux kernel affects the vmwgfx module responsible for graphics handling. Boolean literals were incorrectly assigned to the guest_memory_size allocation field, instead of the intended guest_memory_dirty bitfield. This oversight leads to incorrect handling of resource allocation sizes, impacting memory tracking and causing potential buffer overflows or data corruption. The resolution involves renaming the assignments to correctly update the dirty memory tracking.

References