In the Linux kernel, the following vulnerability has been resolved:
drm/imagination: take paired job reference
For paired jobs, have the fragment job take a reference on the geometry job, so that the geometry job cannot be freed until the fragment job has finished with it.
The geometry job structure is accessed when the fragment job is being prepared by the GPU scheduler. Taking the reference prevents the geometry job being freed until the fragment job no longer requires it.
Fixes a use after free bug detected by KASAN:
[ 124.256386] BUG: KASAN: slab-use-after-free in pvr_queue_prepare_job+0x108/0x868 [powervr] [ 124.264893] Read of size 1 at addr ffff0000084cb960 by task kworker/u16:4/63
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-obs-build | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-xilinx-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gke-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-raspiUpgrade linux-image-oracleUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-aws-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-xilinxUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-generic-64kUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-ibm-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-azure-fipsUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-fipsUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-intel-iot-realtime | Jun 26, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub