In the Linux kernel, the following vulnerability has been resolved:
drm/xe/dma-buf: fix UAF with retry loop
Retry doesn't work here, since bo will be freed on error, leading to UAF. However, now that we do the alloc & init before the attach, we can now combine this as one unit and have the init do the alloc for us. This should make the retry safe.
Reported by Sashiko.
v2: Fix up the error unwind (CI)
(cherry picked from commit 479669418253e0f27f8cf5db01a731352ea592e7)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade libperfUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-modules-coreUpgrade rvUpgrade kernel-64k-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-rt-64kUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-coreUpgrade python3-perfUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-debugUpgrade rtlaUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64kUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-debugUpgrade kernel-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-64k-devel | Aug 2, 2026 | Jul 24, 2026 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 17, 2026 | Jun 24, 2026 |
| Rocky_linux | — | Upgrade kernel-rt-develUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-extra-matchedUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debuginfo-common-s390xUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade libperf-debuginfoUpgrade rvUpgrade kernel-tools-libs-develUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade rtlaUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade kernel-rt-modules-coreUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debuginfoUpgrade perfUpgrade kernel-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade libperfUpgrade kernel-debuginfoUpgrade kernel-debug-debuginfo | Jul 27, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-oem-24.04Upgrade linux-image-7.0.0-1009-awsUpgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-raspi-7.0Upgrade linux-image-oem-24.04dUpgrade linux-image-oracle-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-virtualUpgrade linux-image-aws-64kUpgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-virtual-7.0Upgrade linux-image-genericUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-7.0.0-1009-oemUpgrade linux-image-gkeUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-nvidiaUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-azure-fde-7.0Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-awsUpgrade linux-image-oracle-7.0Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-7.0Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-ibm-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-azure-7.0Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-gke-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-nvidia-bosUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-generic-7.0Upgrade linux-image-gke-64kUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-gke-64k-7.0Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-7.0Upgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-generic-64kUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-aws-64k-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-realtimeUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-realtime-64kUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-oem-7.0Upgrade linux-image-oem-26.04Upgrade linux-image-aws-7.0Upgrade linux-image-azure-fde | Jul 20, 2026 | Jun 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub