CVE-2026-74445
Last modified
CVE-2026-74445 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: reject DX_BIND_QUERY without a DX context vmw_cmd_dx_bind_query() unconditionally dereferences sw_context->dx_ctx_node->ctx. Userspace can trigger a NULL pointer dereference from any render-node fd by submitting an execbuf with dx_context_handle == SVGA3D_INVALID_ID and a SVGA_3D_CMD_DX_BIND_QUERY opcode in the command stream: dx_ctx_node is left NULL and the kernel oopses on the assignment. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: reject DX_BIND_QUERY without a DX context vmw_cmd_dx_bind_query() unconditionally dereferences sw_context->dx_ctx_node->ctx. Userspace can trigger a NULL pointer dereference from any render-node fd by submitting an execbuf with dx_context_handle == SVGA3D_INVALID_ID and a SVGA_3D_CMD_DX_BIND_QUERY opcode in the command stream: dx_ctx_node is left NULL and the kernel oopses on the assignment. The same NULL is then re-read in vmw_resources_reserve() via vmw_context_get_dx_query_mob(). All sibling DX handlers fail-close on a missing dx_ctx_node using VMW_GET_CTX_NODE(). Use the same pattern here, returning -EINVAL up front before any relocation state is published.
Metrics
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 9c079b8ce8bf8e0394149eb39c78b04285644bcc, < 7eae011829f94a76470ec76f016805f508437755; >= 9c079b8ce8bf8e0394149eb39c78b04285644bcc, < 0634d50e8b398c25bd07c96b048e484d22688c26; >= 9c079b8ce8bf8e0394149eb39c78b04285644bcc, < e479240a1e076ba1104236331abd62400bf1d495; >= 9c079b8ce8bf8e0394149eb39c78b04285644bcc, < 6b1eb0b63cc153e1c0cb5ab8350950119be11947; >= 9c079b8ce8bf8e0394149eb39c78b04285644bcc, < 55ec09c9ce10b1272802c7ab6c1be2ea0dbc68db |
| Linux | Linux | 4.20 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-74445?
How severe is CVE-2026-74445?
How do I fix CVE-2026-74445?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-7444The Search Analytics for WP plugin for WordPress is vulnerab…8.1
- CVE-2026-74440In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-74441In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74442In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74443In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-74444In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-74446In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-74447In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-74448In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74449In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-7445A security vulnerability has been detected in ZachHandley ZM…6.3
- CVE-2026-74450In the Linux kernel, the following vulnerability has been re…7.8
Are you affected by CVE-2026-74445?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST