In the Linux kernel, the following vulnerability has been resolved:
drm/xe/vm: move xa_alloc to prevent UAF
Evil user can guess the next id of the vm before the ioctl completes and then call vm destroy ioctl to trigger UAF since create ioctl is still referencing the same vm. Move the xa_alloc all the way to the end to prevent this.
v2: - Rebase
(cherry picked from commit dcfd3971327f3ee92765154baebbaece833d3ca9)
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-azureUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1025-awsUpgrade linux-image-ibmUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-genericUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-oracleUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-kvmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-56-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-awsUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-oem-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04b | Feb 20, 2025 | Oct 21, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub