{"id":"CVE-2026-68446","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-68446","summary":"drm/vmwgfx: Validate vmw_surface_metadata::array_size","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vmwgfx: Validate vmw_surface_metadata::array_size\n\nThis field comes from userspace and should be validated against specific\nlimits depending on which Shader Model (SM) is available.","published":"2026-08-12T00:07:37.385Z","modified":"2026-08-14T04:04:01.873717145Z","cvss":{"score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"Linux","name":"Kernel","fixedVersion":"6.6.148"}],"fix":null,"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/5ff94e1279176b539d451e3e754fdcbd1a8d520a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6910ccaf41678f7761ba2e57d72b77d056320b4d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/71779fe8bf403a9b3e28dc59229fa556db32d35d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a4f55260f7f7d4dc4d0ee55063dfb0c457b77991"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b1379f0c42b88cb60b9f3757eb5d1e73ad460ed8"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68446.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68446"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-14T04:04:01.873717145Z"}}