Strix
64.8K

CVE-2026-68446

HIGHCVSS 7.8/10EPSS 0.12%

Last modified

CVE-2026-68446 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw_surface_metadata::array_size This field comes from userspace and should be validated against specific limits depending on which Shader Model (SM) is available.. EPSS estimates a 0.12% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw_surface_metadata::array_size This field comes from userspace and should be validated against specific limits depending on which Shader Model (SM) is available.

Metrics

CVSS 3.1
7.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.12%

2.1th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 504901dbb0b565fcbe466b0c56f3131586df5afd, < e949adf2d42678fb391a41db277e2fcb12090566; >= 504901dbb0b565fcbe466b0c56f3131586df5afd, < 0403cec2aff8037bc246cf9a0831eb169ddcd9df; >= 504901dbb0b565fcbe466b0c56f3131586df5afd, < aded8463466ede7a7fbd1bbf821756c67c83e89b; >= 504901dbb0b565fcbe466b0c56f3131586df5afd, < 5ff94e1279176b539d451e3e754fdcbd1a8d520a; >= 504901dbb0b565fcbe466b0c56f3131586df5afd, < 71779fe8bf403a9b3e28dc59229fa556db32d35d; >= 504901dbb0b565fcbe466b0c56f3131586df5afd, < b1379f0c42b88cb60b9f3757eb5d1e73ad460ed8; >= 504901dbb0b565fcbe466b0c56f3131586df5afd, < 6910ccaf41678f7761ba2e57d72b77d056320b4d; >= 504901dbb0b565fcbe466b0c56f3131586df5afd, < a4f55260f7f7d4dc4d0ee55063dfb0c457b77991
LinuxLinux5.7

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-68446?
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw_surface_metadata::array_size This field comes from userspace and should be validated against specific limits depending on which Shader Model (SM) is available.
How severe is CVE-2026-68446?
CVE-2026-68446 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.12% probability of exploitation in the next 30 days.
How do I fix CVE-2026-68446?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-68446?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST