In the Linux kernel, the following vulnerability has been resolved:
drm/v3d: Validate passed in drm syncobj handles in the timestamp extension
If userspace provides an unknown or invalid handle anywhere in the handle array the rest of the driver will not handle that well.
Fix it by checking handle was looked up successfully or otherwise fail the extension by jumping into the existing unwind.
(cherry picked from commit 8d1276d1b8f738c3afe1457d4dff5cc66fc848a3)
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade kernel-source | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k | Dec 13, 2024 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub