CVE-2026-23430: drm/vmwgfx: Don't overwrite KMS surface dirty tracker
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Don't overwrite KMS surface dirty tracker
We were overwriting the surface's dirty tracker here causing a memory leak.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Systems running the Linux kernel with the drm/vmwgfx graphics driver are the relevant population. Exploitation requires local access and low privileges, according to the CVSS vector.
What impact can exploitation have?
The issue causes a memory leak by overwriting a KMS surface dirty tracker. The reported impact is availability loss; the CVSS vector indicates no confidentiality or integrity impact.
Does exploiting this require user interaction or special conditions?
No user interaction is required. The CVSS vector rates attack complexity as low, but the attack vector is local and requires low privileges.
What should be done to remediate the issue?
Update to a Linux kernel release containing the drm/vmwgfx fix referenced by the listed stable kernel commits. The provided information does not identify affected or fixed kernel version numbers.