Unrated severityNVD Advisory· Published Oct 23, 2026
CVE-2026-99002
CVE-2026-99002
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: validate pitch coming from userspace
Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
5- git.kernel.org/stable/c/21bc51cb89ced74d6645a138cc2f21184bc75094nvd
- git.kernel.org/stable/c/76e5ddd7d9822c8c3492e0f50ba8978e093069adnvd
- git.kernel.org/stable/c/db6fbc2b77849e3c3c2bc115ea9ac925c4625a0dnvd
- git.kernel.org/stable/c/f6d9c8abdf06a9c7efa799532d66ed8d5a50734cnvd
- git.kernel.org/stable/c/fcb137f6e7ed769f7ecad84364a33c451371b602nvd
News mentions
0No linked articles in our index yet.