CVE-2026-68446

A flaw was found in the drm/vmwgfx component of the Linux kernel. This vulnerability arises from insufficient validation of the vmw_surface_metadata::array_size field, which is supplied by userspace. An attacker could exploit this by providing a malformed array_size value, potentially leading to unexpected system behavior or a denial of service (DoS).

This issue affects VMware vmwgfx virtual GPU guests. vmw_surface_metadata::array_size from userspace was not validated against shader model limits, potentially allowing out-of-bounds access. Systems not using vmwgfx are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.