ZDI-26-232
HIGH 8.8
Published
Mar 30, 2026
Red Hat Enterprise Linux vmwgfx Driver Integer Overflow Local Privilege Escalation Vulnerability
Red
A privilege escalation vulnerability identified as CVE-2025-40277 affects Red Hat Enterprise Linux, allowing local attackers with low-privileged code execution to escalate their permissions to higher privilege levels. This high-severity flaw (CVSS 8.8) could enable attackers to gain complete control of affected systems. Security teams should prioritize patching Red Hat Enterprise Linux systems and review access controls to limit low-privileged code execution on critical infrastructure.