In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix prime with external buffers
Make sure that for external buffers mapping goes through the dma_buf interface instead of trying to access pages directly.
External buffers might not provide direct access to readable/writable pages so to make sure the bo's created from external dma_bufs can be read dma_buf interface has to be used.
Fixes crashes in IGT's kms_prime with vgem. Regular desktop usage won't trigger this due to the fact that virtual machines will not have multiple GPUs but it enables better test coverage in IGT.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 13, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kselftests-kmp-defaultUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade dtb-lgUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade kernel-64kb-extraUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-optionalUpgrade dtb-appleUpgrade kernel-docsUpgrade kernel-rt_debug-develUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-marvellUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-rtUpgrade dlm-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-broadcomUpgrade kselftests-kmp-rtUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-socionextUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade dlm-kmp-azureUpgrade kernel-source-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-default-baseUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade kernel-develUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-rt-extraUpgrade kernel-devel-azureUpgrade dtb-armUpgrade kernel-devel-rtUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade dtb-qcom | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-gkeop-6.8Upgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-awsUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04d | Dec 13, 2024 | Sep 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub