CVE-2026-68446
Publication date 12 August 2026
Last updated 9 October 2026
Ubuntu priority
Description
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw_surface_metadata::array_size This field comes from userspace and should be validated against specific limits depending on which Shader Model (SM) is available.
Why is this CVE high priority?
See ubuntu cvss score
Patch details
| Package | Patch details |
|---|
Severity score breakdown
CVSS version:
Base score
7.3 · High
Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Base score
7.8 · High
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
Related Ubuntu Security Notices (USN)
- USN-8876-1
- Linux kernel (Azure CVM) vulnerabilities
- 6 October 2026
- USN-8878-1
- Linux kernel (GCP) vulnerabilities
- 6 October 2026
- USN-8879-1
- Linux kernel (Oracle) vulnerabilities
- 6 October 2026
- USN-8877-1
- Linux kernel (GCP) vulnerabilities
- 6 October 2026
- USN-8875-1
- Linux kernel vulnerabilities
- 6 October 2026
- USN-8888-1
- Linux kernel (Azure) vulnerabilities
- 6 October 2026
- USN-8889-1
- Linux kernel (OEM) vulnerabilities
- 6 October 2026
- USN-8887-1
- Linux kernel vulnerabilities
- 6 October 2026
- USN-8886-1
- Linux kernel (NVIDIA Tegra) vulnerabilities
- 6 October 2026
- USN-8887-2
- Linux kernel (AWS) vulnerabilities
- 8 October 2026
- USN-8888-2
- Linux kernel (Azure) vulnerabilities
- 8 October 2026
- USN-8875-2
- Linux kernel (NVIDIA) vulnerabilities
- 9 October 2026
- USN-8887-3
- Linux kernel vulnerabilities
- 9 October 2026
Other references
- https://www.cve.org/CVERecord?id=CVE-2026-68446
- https://git.kernel.org/stable/c/71779fe8bf403a9b3e28dc59229fa556db32d35d
- https://git.kernel.org/stable/c/6910ccaf41678f7761ba2e57d72b77d056320b4d
- https://git.kernel.org/stable/c/b1379f0c42b88cb60b9f3757eb5d1e73ad460ed8
- https://git.kernel.org/stable/c/a4f55260f7f7d4dc4d0ee55063dfb0c457b77991
- https://git.kernel.org/stable/c/5ff94e1279176b539d451e3e754fdcbd1a8d520a