In the Linux kernel, the following vulnerability has been resolved:
drm/i915: mark requests for GuC virtual engines to avoid use-after-free
References to i915_requests may be trapped by userspace inside a sync_file or dmabuf (dma-resv) and held indefinitely across different proceses. To counter-act the memory leaks, we try to not to keep references from the request past their completion. On the other side on fence release we need to know if rq->engine is valid and points to hw engine (true for non-virtual requests). To make it possible extra bit has been added to rq->execution_mask, for marking virtual engines.
(cherry picked from commit 280410677af763f3871b93e794a199cfcf6fb580)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-rt-develUpgrade kernel-docUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-debug-core | Jan 22, 2026 | Jan 19, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.55-75.123Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf | Oct 24, 2025 | Oct 4, 2025 |
| Debian | — | Upgrade linux | Oct 6, 2025 | Oct 6, 2025 |
| Oracle_linux | — | Upgrade kernel | Jan 23, 2026 | Oct 4, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 14, 2025 | Oct 4, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfo | Jan 26, 2026 | Jan 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub