CVE-2026-23317 drm/vmwgfx: Return the correct value in vmw_translate_ptr functions
A logic error in the vmwgfx driver returns success on failure, leading to uninitialized memory access and potential code execution or crashes.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-23317?
CVE-2026-23317 is a high-severity vulnerability in Linux kernel, published on 25 Mar 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Return the correct value in vmw_translate_ptr functions
Before the referenced fixes these functions used a lookup function that returned a pointer. This was changed to another lookup function that returned an error code with the pointer becoming an out parameter.
The error path when the lookup failed was not changed to reflect this change and the code continued to return the PTR_ERR of the now uninitialized pointer. This could cause the vmw_translate_ptr functions to return success when they actually failed causing further uninitialized and OOB accesses.
Which versions are affected by CVE-2026-23317?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-23317?
Apply the vendor's patch.
Is CVE-2026-23317 being exploited?
There is no known exploitation of CVE-2026-23317 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-80714, BELL-CVE-2026-23317, DEBIAN-CVE-2026-23317, GHSA-x2vc-23cg-h9h7, ROOT-OS-DEBIAN-12-CVE-2026-23317, ROOT-OS-DEBIAN-13-CVE-2026-23317 and 2 more.