Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23008

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix KMS with 3D on HW version 10 HW version 10 does not have GB Surfaces so there is no backing buffer for surface backed FBs. This would result in a nullptr dereference and crash the driver causing a black screen.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:a2e673929b561d17ab390d533ed9eba83133fbb3ae4f66acbe26f67940d501d7
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/vmwgfx/vmwgfx_kms.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.16"},{"lessThan":"6.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.7","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.19","versionType":"original_commit_for_fix"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2055c5646864a86f90bb57497972414f35314c057ad05849d4909b15327fac6f · sha256:1a11970a6709d07b… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/vmwgfx/vmwgfx_kms.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a91bdd21d5efb3072beefbec13762b7722200c49","status":"affected","version":"965544150d1cadf0e8f5bb6c13c19697e46e1429","versionType":"git"},{"lessThan":"d9186faeae6efb7d0841a5e8eb213ff4c7966614","status":"affected","version":"965544150d1cadf0e8f5bb6c13c19697e46e1429","versionType":"git"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2055c5646864a86f90bb57497972414f35314c057ad05849d4909b15327fac6f · sha256:1a11970a6709d07b… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/vmwgfx/vmwgfx_kms.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.16"},{"lessThan":"6.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.7","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.19","versionType":"original_commit_for_fix"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2055c5646864a86f90bb57497972414f35314c057ad05849d4909b15327fac6f · sha256:1a11970a6709d07b… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/vmwgfx/vmwgfx_kms.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a91bdd21d5efb3072beefbec13762b7722200c49","status":"affected","version":"965544150d1cadf0e8f5bb6c13c19697e46e1429","versionType":"git"},{"lessThan":"d9186faeae6efb7d0841a5e8eb213ff4c7966614","status":"affected","version":"965544150d1cadf0e8f5bb6c13c19697e46e1429","versionType":"git"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2055c5646864a86f90bb57497972414f35314c057ad05849d4909b15327fac6f · sha256:1a11970a6709d07b… · /containers/cna/affected/0

Source references

2 source assertions
{"url":"https://git.kernel.org/stable/c/a91bdd21d5efb3072beefbec13762b7722200c49"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2055c5646864a86f90bb57497972414f35314c057ad05849d4909b15327fac6f · sha256:1a11970a6709d07b… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/d9186faeae6efb7d0841a5e8eb213ff4c7966614"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2055c5646864a86f90bb57497972414f35314c057ad05849d4909b15327fac6f · sha256:1a11970a6709d07b… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer