CVE-2026-74443

A flaw was found in the Linux kernel's drm/vmwgfx component. A local attacker could exploit a vulnerability in the vmw_cmd_dma() function, where an undersized header in a Direct Memory Access (DMA) command body causes a pointer to underflow. This allows the attacker to overwrite authenticated fields of a previously processed command. Such manipulation of the command stream could lead to privilege escalation or information disclosure.

This vulnerability is evaluated as Moderate severity because exploitation requires local access with privileges to interact with the Direct Rendering Manager interface, and it only affects guest systems running inside VMware virtual environments where the vmwgfx driver is enabled. The issue cannot be triggered remotely or on physical hardware and non-VMware virtualization platforms. Consequently, the blast radius is confined to local privilege escalation or unauthorized data access within the affected guest instance.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.