In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix prime with external buffers
Make sure that for external buffers mapping goes through the dma_buf interface instead of trying to access pages directly.
External buffers might not provide direct access to readable/writable pages so to make sure the bo's created from external dma_bufs can be read dma_buf interface has to be used.
Fixes crashes in IGT's kms_prime with vgem. Regular desktop usage won't trigger this due to the fact that virtual machines will not have multiple GPUs but it enables better test coverage in IGT.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 13, 2024 |
| Suse | — | Upgrade kernel-obs-buildUpgrade dtb-qcomUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade dtb-amlogicUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade kernel-rtUpgrade dtb-xilinxUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade dlm-kmp-rtUpgrade kernel-macrosUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade dtb-armUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-obs-qaUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade cluster-md-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade dtb-amdUpgrade kernel-symsUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade kselftests-kmp-defaultUpgrade kernel-64kbUpgrade kernel-source-rtUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-rtUpgrade dtb-amazonUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-debugUpgrade kernel-default-develUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade kernel-docsUpgrade dtb-apm | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-gkeopUpgrade linux-image-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-azureUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fde | Dec 13, 2024 | Sep 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub