PT-2025-46554 · Linux+4 · Linux Kernel+4
Published
2025-10-06
·
Updated
2026-05-07
·
CVE-2025-40110
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw within the drm/vmwgfx subsystem related to cursor snooping. The issue arises from a missing check for resource existence before attempting to use the cursor snooper, potentially leading to a null pointer access. The
vmw cmd res check function permits invalid identifiers, and functions handling surfaces may not be able to manage null objects. This fix validates both the identifier and the resource's existence before proceeding with snooping operations, addressing the unchecked null pointer reference.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Improper Resource Release
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu
Vmwgfx