In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix prime with external buffers
Make sure that for external buffers mapping goes through the dma_buf interface instead of trying to access pages directly.
External buffers might not provide direct access to readable/writable pages so to make sure the bo's created from external dma_bufs can be read dma_buf interface has to be used.
Fixes crashes in IGT's kms_prime with vgem. Regular desktop usage won't trigger this due to the fact that virtual machines will not have multiple GPUs but it enables better test coverage in IGT.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 13, 2024 |
| Suse | — | Upgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade dtb-broadcomUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade kernel-source-azureUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kselftests-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade dtb-amazonUpgrade kernel-64kb-develUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade kernel-source-rtUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade kernel-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade dtb-appleUpgrade ocfs2-kmp-azureUpgrade dtb-marvellUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade dtb-qcomUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade kernel-devel-azureUpgrade dtb-armUpgrade kernel-defaultUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmallUpgrade dlm-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade dtb-exynosUpgrade ocfs2-kmp-default | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-azureUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04 | Dec 13, 2024 | Sep 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub