In the Linux kernel, the following vulnerability has been resolved:
drm/panthor: Lock XArray when getting entries for the VM
Similar to commit cac075706f29 ("drm/panthor: Fix race when converting group handle to group object") we need to use the XArray's internal locking when retrieving a vm pointer from there.
v2: Removed part of the patch that was trying to protect fetching the heap pointer from XArray, as that operation is protected by the @pool->lock.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-oem-24.04b | Feb 20, 2025 | Nov 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub