AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-68446

HIGH · CVSS 7.8 EPSS 0.12%

Source: NVD + CISA KEV + EPSS · Published 2026-08-12 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability in the Linux kernel affects the vmwgfx driver, specifically the validation of the `vmw_surface_metadata::array_size` field, which originates from userspace and lacks proper checks against defined limits based on the available Shader Model. This oversight could lead to potential exploitation, allowing attackers to manipulate memory and execute arbitrary code. Organizations using Linux systems with the vmwgfx driver should prioritize patching to mitigate risks associated with this vulnerability.

CVE
CVE-2026-68446
Severity
HIGH
CVSS
7.8
EPSS
0.12%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw_surface_metadata::array_size This field comes from userspace and should be validated against specific limits depending on which Shader Model (SM) is available.