In the Linux kernel, the following vulnerability has been resolved:
drm/i915: mark requests for GuC virtual engines to avoid use-after-free
References to i915_requests may be trapped by userspace inside a sync_file or dmabuf (dma-resv) and held indefinitely across different proceses. To counter-act the memory leaks, we try to not to keep references from the request past their completion. On the other side on fence release we need to know if rq->engine is valid and points to hw engine (true for non-virtual requests). To make it possible extra bit has been added to rq->execution_mask, for marking virtual engines.
(cherry picked from commit 280410677af763f3871b93e794a199cfcf6fb580)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-develUpgrade perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extra | Jan 22, 2026 | Jan 19, 2026 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.55-75.123Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfo | Oct 24, 2025 | Oct 4, 2025 |
| Debian | — | Upgrade linux | Oct 6, 2025 | Oct 6, 2025 |
| Oracle_linux | — | Upgrade kernel | Jan 23, 2026 | Oct 4, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 14, 2025 | Oct 4, 2025 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rtUpgrade perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfo | Jan 26, 2026 | Jan 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub