In the Linux kernel, the following vulnerability has been resolved:
drm/xe/ufence: Prefetch ufence addr to catch bogus address
access_ok() only checks for addr overflow so also try to read the addr to catch invalid addr sent from userspace.
(cherry picked from commit 9408c4508483ffc60811e910a93d6425b8e63928)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-genericUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-virtualUpgrade linux-image-6.11.0-1008-raspi | Feb 20, 2025 | Nov 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub