In the Linux kernel, the following vulnerability has been resolved:
drm/v3d: Prevent out of bounds access in performance query extensions
Check that the number of perfmons userspace is passing in the copy and reset extensions is not greater than the internal kernel storage where the ids will be copied into.
(cherry picked from commit f32b5128d2c440368b5bf3a7a356823e235caabb)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Suse | — | Upgrade kernel-sourceUpgrade reiserfs-kmp-defaultUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-64kb-devel | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-virtualUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04Upgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-24.04 | Dec 13, 2024 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub