The Linux kernel contained a vulnerability in the drm/vmwgfx driver where the command header size was not properly validated against the maximum allowed data size (SVGA_CMD_MAX_DATASIZE). Since this data originates from userspace and is used in buffer offset calculations, the lack of validation could lead to an overflow and out-of-bounds memory access. This vulnerability has been fixed in the Linux kernel source. The CVSS 3.1 vector indicates the attack requires local access with low complexity and privileges, no user interaction, and impacts confidentiality, integrity, and availability with high severity.

If exploited, this vulnerability could allow a local attacker with limited privileges to cause out-of-bounds memory access, potentially leading to arbitrary code execution, privilege escalation, or denial of service. The impact affects confidentiality, integrity, and availability of the system.

A fix for this vulnerability has been implemented in the Linux kernel. Users and administrators should update their Linux kernel to the latest version that includes this patch. Since this is not a cloud service, remediation requires applying the official kernel update. Patch status is not explicitly confirmed in the provided data, so verify with the official Linux kernel advisories for the exact fixed versions and update accordingly.