In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix prime with external buffers
Make sure that for external buffers mapping goes through the dma_buf interface instead of trying to access pages directly.
External buffers might not provide direct access to readable/writable pages so to make sure the bo's created from external dma_bufs can be read dma_buf interface has to be used.
Fixes crashes in IGT's kms_prime with vgem. Regular desktop usage won't trigger this due to the fact that virtual machines will not have multiple GPUs but it enables better test coverage in IGT.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 13, 2024 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade dtb-armUpgrade kernel-sourceUpgrade dtb-amlogicUpgrade dtb-mediatekUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-defaultUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-appleUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-amazonUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade dtb-lgUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade kernel-default-develUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-docsUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-default-livepatchUpgrade kselftests-kmp-azureUpgrade kernel-64kbUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade kernel-rt-optional | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-nvidia-6.8Upgrade linux-image-virtualUpgrade linux-image-oem-22.04aUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04 | Dec 13, 2024 | Sep 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub