A memory corruption vulnerability in the Linux kernel vmwgfx driver could allow a local attacker with low privileges to execute arbitrary code or crash the system.

This vulnerability occurs in the vmwgfx driver when processing DMA commands. The code fails to validate that the command header size is sufficient to contain both the body and the suffix, allowing an attacker with local, low-level access to trigger memory corruption.

The ability to perform out-of-bounds memory access poses a severe threat to system security. An attacker could leverage this to elevate privileges or cause a kernel panic, leading to system unavailability. With a CVSS score of 8.8, the potential for impact on host integrity and availability is significant.

Immediate Action: Update your Linux kernel to version 6.6.151, 6.12.103, 6.18.44, 7.1.8, or later.

Proactive Monitoring: Audit system logs for recurring segmentation faults or kernel crashes that may indicate exploitation attempts against the graphics driver.

Compensating Controls: If immediate patching is not feasible, restrict access to the graphics subsystem by limiting user access to the device nodes associated with the vmwgfx driver.

Public Exploit Available: Unknown

This vulnerability presents a high risk of local privilege escalation. System administrators must prioritize applying the provided kernel patches across all affected Linux infrastructure to eliminate this attack vector.