CVE-2025-40277

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the drm/vmwgfx module where command header size validation against SVGA CMD MAX DATASIZE is insufficient. Data originating from userspace, used in buffer offset calculations, could lead to an out-of-bounds access due to a potential overflow. The SVGA CMD MAX DATASIZE variable is involved in this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.