CVE-2026-74442

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the drm/vmwgfx component where the vmw vkms init() function can leave the vmw->crc workq variable as NULL. This occurs under two conditions: when vmw host get guestinfo(GUESTINFO VBLANK, ...) fails or returns an oversized buffer, or when alloc ordered workqueue() returns NULL due to memory pressure. Subsequently, during module unload, the vmw vkms cleanup() function calls destroy workqueue(NULL), leading to a null pointer dereference of wq->name and causing a system panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.