In the Linux kernel, the following vulnerability has been resolved:
drm/i915: mark requests for GuC virtual engines to avoid use-after-free
References to i915_requests may be trapped by userspace inside a sync_file or dmabuf (dma-resv) and held indefinitely across different proceses. To counter-act the memory leaks, we try to not to keep references from the request past their completion. On the other side on fence release we need to know if rq->engine is valid and points to hw engine (true for non-virtual requests). To make it possible extra bit has been added to rq->execution_mask, for marking virtual engines.
(cherry picked from commit 280410677af763f3871b93e794a199cfcf6fb580)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debug | Jan 22, 2026 | Jan 19, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.55-75.123Upgrade kernel-devel | Oct 24, 2025 | Oct 4, 2025 |
| Debian | — | Upgrade linux | Oct 6, 2025 | Oct 6, 2025 |
| Oracle_linux | — | Upgrade kernel | Jan 23, 2026 | Oct 4, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 14, 2025 | Oct 4, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debuginfo | Jan 26, 2026 | Jan 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub