In the Linux kernel, the following vulnerability has been resolved:
drm/imagination: take paired job reference
For paired jobs, have the fragment job take a reference on the geometry job, so that the geometry job cannot be freed until the fragment job has finished with it.
The geometry job structure is accessed when the fragment job is being prepared by the GPU scheduler. Taking the reference prevents the geometry job being freed until the fragment job no longer requires it.
Fixes a use after free bug detected by KASAN:
[ 124.256386] BUG: KASAN: slab-use-after-free in pvr_queue_prepare_job+0x108/0x868 [powervr] [ 124.264893] Read of size 1 at addr ffff0000084cb960 by task kworker/u16:4/63
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade kernel-default-livepatchUpgrade kernel-macrosUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-6.8Upgrade linux-image-realtimeUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-virtual-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04bUpgrade linux-image-azureUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-ibmUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-generic-6.8 | Jun 26, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub