In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Don't free job in TDR
Freeing job in TDR is not safe as TDR can pass the run_job thread resulting in UAF. It is only safe for free job to naturally be called by the scheduler. Rather free job in TDR, add to pending list.
(cherry picked from commit ea2f6a77d0c40d97f4a4dc93fee4afe15d94926d)
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-oem-24.04bUpgrade linux-image-genericUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-azureUpgrade linux-image-realtime | Feb 20, 2025 | Nov 7, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub