In the Linux kernel, the following vulnerability has been resolved:
drm/xe/dma-buf: fix UAF with retry loop
Retry doesn't work here, since bo will be freed on error, leading to UAF. However, now that we do the alloc & init before the attach, we can now combine this as one unit and have the init do the alloc for us. This should make the retry safe.
Reported by Sashiko.
v2: Fix up the error unwind (CI)
(cherry picked from commit 479669418253e0f27f8cf5db01a731352ea592e7)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-64k-debugUpgrade kernel-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debugUpgrade kernel-devel-matchedUpgrade rvUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-64k-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade python3-perfUpgrade kernel-zfcpdump-modules-coreUpgrade libperfUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-64k-coreUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade rtlaUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-rt-64k-develUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modulesUpgrade kernel-64kUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-debug-modules | Aug 2, 2026 | Jul 24, 2026 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 17, 2026 | Jun 24, 2026 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-rt-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-rt-coreUpgrade kernel-uki-virtUpgrade rtlaUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade perf-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-debug-debuginfoUpgrade libperfUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-uki-virt-addonsUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-develUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade python3-perf-debuginfoUpgrade libperf-debuginfoUpgrade rvUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt | Jul 27, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-oem-24.04bUpgrade linux-image-aws-64kUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-gcp-7.0Upgrade linux-image-gkeUpgrade linux-image-azure-fde-7.0Upgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-oem-24.04aUpgrade linux-image-awsUpgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-7.0Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-7.0.0-1009-oemUpgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-oem-24.04Upgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-virtual-7.0Upgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-ibm-7.0Upgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-64k-7.0Upgrade linux-image-oem-24.04dUpgrade linux-image-raspi-7.0Upgrade linux-image-ibmUpgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-realtime-64kUpgrade linux-image-oem-26.04Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-oem-26.04aUpgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-realtimeUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-oem-7.0Upgrade linux-image-7.0.0-1010-azureUpgrade linux-image-azure-fdeUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-gke-64kUpgrade linux-image-generic-7.0Upgrade linux-image-azure-7.0Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-nvidia-7.0Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-gke-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-nvidia-bosUpgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-gke-64k-7.0Upgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-generic-64kUpgrade linux-image-realtime-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-aws-64k-7.0 | Jul 20, 2026 | Jun 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub