---
id: CVE-2026-23008
title: 'drm/vmwgfx: Fix KMS with 3D on HW version 10'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/vmwgfx: Fix KMS with 3D on HW version 10

  HW version 10 does not have GB Surfaces so there is no backing buffer for
  surface backed FBs. This would result in a nullp…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 965544150d1cadf0e8f5bb6c13c19697e46e1429 <
    a91bdd21d5efb3072beefbec13762b7722200c49
  - >-
    Linux >= 965544150d1cadf0e8f5bb6c13c19697e46e1429 <
    d9186faeae6efb7d0841a5e8eb213ff4c7966614
  - Linux 6.16
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:18:29.578795Z'
exploitAvailable: true
published: '2026-01-25'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:23:15.274Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-23008'
references:
  - url: 'https://git.kernel.org/stable/c/a91bdd21d5efb3072beefbec13762b7722200c49'
  - url: 'https://git.kernel.org/stable/c/d9186faeae6efb7d0841a5e8eb213ff4c7966614'
tags:
  - cve.org
  - exploit-available
epss: 0.00158
epssPercentile: 0.04973
exploits:
  github: 1
  githubRepos:
    - >-
      https://github.com/George0Papasotiriou/CVE-2026-23008-Solidity-Assembly-Return-Data-Size-Confusion
  checkedAt: '2026-11-08T19:17:29.725Z'
ingestedAt: '2026-11-05T22:38:32.065Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/vmwgfx: Fix KMS with 3D on HW version 10

HW version 10 does not have GB Surfaces so there is no backing buffer for
surface backed FBs. This would result in a nullptr dereference and crash
the driver causing a black screen.

## Affected

- `Linux >= 965544150d1cadf0e8f5bb6c13c19697e46e1429 < a91bdd21d5efb3072beefbec13762b7722200c49`
- `Linux >= 965544150d1cadf0e8f5bb6c13c19697e46e1429 < d9186faeae6efb7d0841a5e8eb213ff4c7966614`
- `Linux 6.16`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.