CVE-2026-80702

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the drm/vmwgfx component where boolean literals are incorrectly assigned to the res->guest memory size field instead of the res->guest memory dirty bitfield within vmwgfx resource.c. This occurs in the vmw resource release() function, which writes 0, and the vmw resource unbind list() function, which writes 1. Consequently, the allocation size field is overwritten with 0 or 1, leading to zero-length walks or wrap-around ranges during revalidation paths in vmw bo dirty transfer to res() and vmw resource buf alloc(). This can result in reading or writing past the MOB (Managed Object Buffer) bitmap and causes the loss of dirty-tracking functionality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.