CVE-2026-23215

A flaw was found in the Linux kernel's VMware guest support on x86_64 systems. When running under QEMU with VMware mouse emulation, the vmware_hypercall3() and vmware_hypercall4() functions do not properly mark the RDI and RSI registers as clobbered. The QEMU vmmouse driver incorrectly clears the upper 32 bits of these registers, causing kernel pointer truncation. This results in a page fault when the corrupted pointer is dereferenced, leading to a kernel crash.

This flaw is specific to x86_64 Linux guests running under QEMU with VMware mouse emulation enabled. While the root cause is a bug in QEMU's vmmouse implementation, the kernel workaround ensures compatibility with existing deployments. Physical hardware and other hypervisors are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.