In the Linux kernel, the following vulnerability has been resolved:
drm/i915: fix race condition UAF in i915_perf_add_config_ioctl
Userspace can guess the id value and try to race oa_config object creation with config remove, resulting in a use-after-free if we dereference the object after unlocking the metrics_lock. For that reason, unlocking the metrics_lock must be done after we are done dereferencing the object.
[tursulin: Manually added stable tag.] (cherry picked from commit 49f6f6483b652108bcb73accd0204a464b922395)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-headersUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.108-65.141Upgrade kernel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade perfUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-6.1.25-37.47Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Feb 20, 2026 | Dec 30, 2025 |
| Debian | — | Upgrade linux | Dec 31, 2025 | Dec 31, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 30, 2025 |
| Ubuntu | — | Upgrade linux-hwe-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-aws-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-intel-iotgUpgrade linux-kvmUpgrade linux-realtimeUpgrade linux-gkeUpgrade linux-bluefieldUpgrade linux-gcp-5.15Upgrade linux-azureUpgrade linux-awsUpgrade linux-riscv-5.15Upgrade linux-azure-fdeUpgrade linux-raspiUpgrade linux-lowlatencyUpgrade linux-nvidiaUpgrade linux-nvidia-tegra-igxUpgrade linux-azure-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-oracleUpgrade linux-gkeopUpgrade linux-ibmUpgrade linux-gcpUpgrade linux-nvidia-tegraUpgrade linux-oracle-5.15Upgrade linuxUpgrade linux-xilinx-zynqmpUpgrade linux-ibm-5.15 | Jan 6, 2026 | Jan 2, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub