cve 2025 40277

The Linux kernel was patched to fix a bug in the VMware guest graphics driver (drm/vmwgfx) that failed to validate a command header size against the constant SVGA_CMD_MAX_DATASIZE, allowing user-supplied values to influence buffer offset calculations and potentially cause an out‑of‑bounds...