In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside… (CVE-2026-99002)

The Linux kernel contained a vulnerability in the drm/vmwgfx driver where the pitch value provided from userspace was not properly validated alongside the box dimensions before copying data from the underlying surface. This flaw could lead to out-of-bounds memory reads, potentially exposing sensitive information through cursor snooping. The vulnerability has been resolved by adding validation checks to ensure the pitch and box dimensions are correct before data copying occurs.

The vulnerability could allow out-of-bounds reads in kernel memory, which might lead to information disclosure via cursor snooping. There is no indication of code execution or privilege escalation. No known exploits in the wild have been reported.

A fix has been applied to the Linux kernel to validate the pitch and box dimensions before copying data, eliminating the out-of-bounds read issue. Users should update their Linux kernel to a version that includes this fix. Patch status is not explicitly confirmed in the input data; therefore, users should consult the official Linux kernel advisories or vendor updates for the exact fixed versions and apply them accordingly.