In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw_surface_metadata::array_size This field comes from… (CVE-2026-68446)
A vulnerability in the Linux kernel's drm/vmwgfx component related to the vmw_surface_metadata::array_size field has been resolved. This field, originating from userspace, was not properly validated against limits based on the Shader Model (SM) in use. The issue has been fixed in the kernel, ensuring proper validation of this field.
AI Analysis
Technical Summary
The Linux kernel contained a vulnerability in the drm/vmwgfx driver where the vmw_surface_metadata::array_size field, which is supplied from userspace, was not validated against specific limits depending on the Shader Model available. This could potentially lead to improper handling of this metadata. The vulnerability has been resolved by adding validation checks for this field to ensure it adheres to expected limits.
Potential Impact
The vulnerability could have allowed malformed userspace input to affect the drm/vmwgfx driver due to lack of validation of the array_size field. The exact impact is not detailed, and no known exploits are reported. The fix prevents potential misuse of this field by enforcing validation.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to validate the vmw_surface_metadata::array_size field properly. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory for the current remediation guidance.
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw_surface_metadata::array_size This field comes from… (CVE-2026-68446)
Description
A vulnerability in the Linux kernel's drm/vmwgfx component related to the vmw_surface_metadata::array_size field has been resolved. This field, originating from userspace, was not properly validated against limits based on the Shader Model (SM) in use. The issue has been fixed in the kernel, ensuring proper validation of this field.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel contained a vulnerability in the drm/vmwgfx driver where the vmw_surface_metadata::array_size field, which is supplied from userspace, was not validated against specific limits depending on the Shader Model available. This could potentially lead to improper handling of this metadata. The vulnerability has been resolved by adding validation checks for this field to ensure it adheres to expected limits.
Potential Impact
The vulnerability could have allowed malformed userspace input to affect the drm/vmwgfx driver due to lack of validation of the array_size field. The exact impact is not detailed, and no known exploits are reported. The fix prevents potential misuse of this field by enforcing validation.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to validate the vmw_surface_metadata::array_size field properly. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory for the current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-55wx-2w5g-rcrg
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-68446"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a7c9b69bf8831d539cdf6ba
Added to database: 08/12/2026, 16:12:25 UTC
Last enriched: 08/12/2026, 17:18:36 UTC
Last updated: 08/13/2026, 00:41:14 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.