PT-2026-4670 · Vmware+1 · Vmwgfx+1

CVE-2026-23008 · Published 2026-01-01 · Updated 2026-07-28

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the drm/vmwgfx component related to handling KMS with 3D on hardware version 10. Specifically, hardware version 10 lacks GB Surfaces, which are necessary for backing buffers for surface-backed framebuffers. This absence leads to a null pointer dereference, causing the driver to crash and resulting in a black screen.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-04099

CVE-2026-23008

USN-8570-1

USN-8570-2

USN-8594-1

USN-8604-1

USN-8605-1

Affected Products

Linux Kernel

Vmwgfx

References · 296

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23008.json · Exploit
• https://ubuntu.com/security/CVE-2026-23055 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23147 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43185 · Vendor Advisory
• https://git.kernel.org/stable/c/a91bdd21d5efb3072beefbec13762b7722200c49 · Patch
• https://ubuntu.com/security/CVE-2026-23010 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23160 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8605-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23116 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23080 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43493 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31402 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31649 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23278 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23066 · Vendor Advisory