In the Linux kernel, the following vulnerability has been resolved:
drm/xe/vm: move xa_alloc to prevent UAF
Evil user can guess the next id of the vm before the ioctl completes and then call vm destroy ioctl to trigger UAF since create ioctl is still referencing the same vm. Move the xa_alloc all the way to the end to prevent this.
v2: - Rebase
(cherry picked from commit dcfd3971327f3ee92765154baebbaece833d3ca9)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1025-awsUpgrade linux-image-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-6.8.0-56-genericUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-6.11.0-1011-oracle-64k | Feb 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub