CVE-2026-23317

A flaw was found in the drm/vmwgfx component of the Linux kernel. Incorrect error handling in the vmw_translate_ptr functions could cause them to return a success status even when an internal lookup operation failed. This could lead to the use of uninitialized pointers and out-of-bounds (OOB) memory accesses, potentially resulting in system instability or information disclosure.

This flaw affects VMware graphics (vmwgfx) driver used in VMware virtual machines. The error handling regression causes failed lookups to incorrectly return success, leading to use of uninitialized pointers and potential OOB memory accesses. This affects systems running Linux guests in VMware environments with 3D acceleration enabled.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.