In the Linux kernel, the following vulnerability has been resolved:
drm/panthor: Fix race when converting group handle to group object
XArray provides it's own internal lock which protects the internal array when entries are being simultaneously added and removed. However there is still a race between retrieving the pointer from the XArray and incrementing the reference count.
To avoid this race simply hold the internal XArray lock when incrementing the reference count, this ensures there cannot be a racing call to xa_erase().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-gcp | Feb 20, 2025 | Nov 8, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub