PT-2026-20427 · Vmware+4 · Vmware+4
Published
2026-01-01
·
Updated
2026-05-26
·
CVE-2026-23215
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw related to hypercall clobbers within the x86/vmware component. Specifically, the QEMU VMware mouse emulation incorrectly clears the upper 32 bits of the
rdi register, which the kernel uses to store a pointer. This results in a page fault when the register is dereferenced after a hypercall, such as vmware hypercall3() and vmware hypercall4(). The issue stems from the QEMU vmmouse driver saving and restoring register state using a "uint32 t data[6]" array, leading to the loss of the upper bits of the register value. The kernel workaround marks rdi and rsi as clobbered for the affected hypercalls to prevent the issue.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Qemu
Ubuntu
Vmware