AZL-110840: CVE-2026-99002 affecting package kernel 6.6.157.1-1

Q: What access does an attacker need to exploit this issue?

The vulnerable pitch value comes from userspace, so exploitation requires the ability to submit crafted graphics data to the vmwgfx DRM driver.

Q: What is the impact of a successful exploit?

A crafted pitch can lead to out-of-bounds reads while copying data from an underlying surface during cursor snooping.

Q: How can I determine whether my system is affected?

Check whether the system uses the azure-linux/kernel package at version 6.6.157.1-1 and whether the vmwgfx DRM driver is in use.

Published Oct 23, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

drm/vmwgfx: validate pitch coming from userspace

Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping.

Affected Software

1 affected component

azure-linux/kernel<=6.6.157.1-1

Event History

Oct 23, 2026

Advisory Published

via OSV·01:17 PM

Data Sourced

via OSV·01:17 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-99002

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The vulnerable pitch value comes from userspace, so exploitation requires the ability to submit crafted graphics data to the vmwgfx DRM driver.

What is the impact of a successful exploit?

A crafted pitch can lead to out-of-bounds reads while copying data from an underlying surface during cursor snooping.

How can I determine whether my system is affected?

Check whether the system uses the azure-linux/kernel package at version 6.6.157.1-1 and whether the vmwgfx DRM driver is in use.

AZL-110840: CVE-2026-99002 affecting package kernel 6.6.157.1-1

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the impact of a successful exploit?

How can I determine whether my system is affected?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the impact of a successful exploit?

How can I determine whether my system is affected?