---
id: CVE-2026-23430
title: 'drm/vmwgfx: Don''t overwrite KMS surface dirty tracker'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/vmwgfx: Don't overwrite KMS surface dirty tracker

  We were overwriting the surface's dirty tracker here causing a memory leak.
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 965544150d1cadf0e8f5bb6c13c19697e46e1429 <
    3f300a41a3668095688aa4551214e8080829fa93
  - >-
    Linux >= 965544150d1cadf0e8f5bb6c13c19697e46e1429 <
    354c8bbf8d1e4aa61e580dbe160591feda504e4f
  - >-
    Linux >= 965544150d1cadf0e8f5bb6c13c19697e46e1429 <
    c6cb77c474a32265e21c4871c7992468bf5e7638
  - Linux 6.16
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:30:35.871055Z'
published: '2026-04-03'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:33:46.561Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-23430'
references:
  - url: 'https://git.kernel.org/stable/c/3f300a41a3668095688aa4551214e8080829fa93'
  - url: 'https://git.kernel.org/stable/c/354c8bbf8d1e4aa61e580dbe160591feda504e4f'
  - url: 'https://git.kernel.org/stable/c/c6cb77c474a32265e21c4871c7992468bf5e7638'
tags:
  - cve.org
epss: 0.00125
epssPercentile: 0.0225
ingestedAt: '2026-11-05T22:38:32.131Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/vmwgfx: Don't overwrite KMS surface dirty tracker

We were overwriting the surface's dirty tracker here causing a memory leak.

## Affected

- `Linux >= 965544150d1cadf0e8f5bb6c13c19697e46e1429 < 3f300a41a3668095688aa4551214e8080829fa93`
- `Linux >= 965544150d1cadf0e8f5bb6c13c19697e46e1429 < 354c8bbf8d1e4aa61e580dbe160591feda504e4f`
- `Linux >= 965544150d1cadf0e8f5bb6c13c19697e46e1429 < c6cb77c474a32265e21c4871c7992468bf5e7638`
- `Linux 6.16`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.