PT-2026-27682 · Linux+3 · Linux Kernel+3

CVE-2026-23317

·

Publicado

2026-01-01

·

Atualizado

2026-08-30

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The vmw translate ptr functions within the vmwgfx module of the Linux kernel incorrectly returned values after a code change related to pointer lookups. A previous implementation used a lookup function returning a pointer, which was then changed to a function returning an error code with the pointer as an out parameter. The error handling path was not updated to reflect this change, leading to the functions potentially returning success when they actually failed. This could result in uninitialized and out-of-bounds accesses.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Access of Uninitialized Pointer

Use of Uninitialized Resource

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

AZL-80714
BDU:2026-12303
CVE-2026-23317
ECHO-90E4-A635-FDB6
OESA-2026-2311
OESA-2026-2418
OESA-2026-2493
OPENSUSE-SU-2026:20826-1
SUSE-SU-2026:1573-1
SUSE-SU-2026:1574-1
SUSE-SU-2026:1606-1
SUSE-SU-2026:1643-1
SUSE-SU-2026:1661-1
SUSE-SU-2026:21114-1
SUSE-SU-2026:21123-1
SUSE-SU-2026:21255-1
SUSE-SU-2026:2134-1
SUSE-SU-2026:2149-1
SUSE-SU-2026:2159-1
SUSE-SU-2026:2172-1
SUSE-SU-2026:2176-1
SUSE-SU-2026:2181-1
SUSE-SU-2026:21834-1
SUSE-SU-2026:21841-1
SUSE-SU-2026:21845-1
SUSE-SU-2026:21860-1
SUSE-SU-2026:21886-1
SUSE-SU-2026:21887-1
SUSE-SU-2026:21888-1
SUSE-SU-2026:21889-1
SUSE-SU-2026:21890-1
SUSE-SU-2026:21891-1
SUSE-SU-2026:21892-1
SUSE-SU-2026:21893-1
SUSE-SU-2026:21896-1
SUSE-SU-2026:21900-1
SUSE-SU-2026:21901-1
SUSE-SU-2026:21902-1
SUSE-SU-2026:21903-1
SUSE-SU-2026:21904-1
SUSE-SU-2026:21905-1
SUSE-SU-2026:21906-1
SUSE-SU-2026:21907-1
SUSE-SU-2026:21910-1
SUSE-SU-2026:21921-1
SUSE-SU-2026:21922-1
SUSE-SU-2026:21923-1
SUSE-SU-2026:21924-1
SUSE-SU-2026:21925-1
SUSE-SU-2026:21926-1
SUSE-SU-2026:21927-1
SUSE-SU-2026:21928-1
SUSE-SU-2026:21929-1
SUSE-SU-2026:21932-1
SUSE-SU-2026:21933-1
SUSE-SU-2026:21934-1
SUSE-SU-2026:21935-1
SUSE-SU-2026:21936-1
SUSE-SU-2026:21937-1
SUSE-SU-2026:21938-1
SUSE-SU-2026:21939-1
SUSE-SU-2026:21942-1
SUSE-SU-2026:21958-1
SUSE-SU-2026:21959-1
SUSE-SU-2026:21960-1
SUSE-SU-2026:21962-1
SUSE-SU-2026:21963-1
SUSE-SU-2026:21969-1
SUSE-SU-2026:21970-1
SUSE-SU-2026:21972-1
SUSE-SU-2026:21979-1
SUSE-SU-2026:21982-1
SUSE-SU-2026:21983-1
SUSE-SU-2026:2199-1
SUSE-SU-2026:22030-1
SUSE-SU-2026:22031-1
SUSE-SU-2026:22033-1
SUSE-SU-2026:22038-1
SUSE-SU-2026:22039-1
SUSE-SU-2026:22040-1
SUSE-SU-2026:22042-1
USN-8567-1
USN-8574-1
USN-8574-2
USN-8574-3
USN-8595-1
USN-8595-2
USN-8595-3
USN-8596-1
USN-8606-1
USN-8607-1
USN-8608-1
USN-8609-1
USN-8619-1
USN-8665-1

Produtos afetados

Linuxmint
Linux Kernel
Ubuntu
Vmwgfx