Vulnerability in Linux
CVE-2026-23317
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Return the correct value in vmw_translate_ptr functions Before the referenced fixes these functions used a lookup function that returned a pointer. This was…
EPSS: 0.000 (4.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux — versions 6.1.7, 6.1.167, a309c7194e8a2f8bd4539b9449917913f6c2cd50
References
- git.kernel.org/stable/c/ce3a5cf139787c186d5d54336107298cacaad2b9
- git.kernel.org/stable/c/7e55d0788b362c93660b80cc5603031bbbdefa98
- git.kernel.org/stable/c/36cb28b6d303a81e6ed4536017090e85e0143e42
- git.kernel.org/stable/c/531f45589787799aa81b63e1e1f8e71db5d93dd1
- git.kernel.org/stable/c/149f028772fa2879d9316b924ce948a6a0877e45
- git.kernel.org/stable/c/5023ca80f9589295cb60735016e39fc5cc714243
Frequently asked questions
- What is CVE-2026-23317?
- CVE-2026-23317 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2026-03-25.
- How severe is CVE-2026-23317?
- High severity. CVSS v3 base score is 7.8 out of 10.