In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Use local fence in error path of xe_migrate_clear
The intent of the error path in xe_migrate_clear is to wait on locally generated fence and then return. The code is waiting on m->fence which could be the local fence but this is only stable under the job mutex leading to a possible UAF. Fix code to wait on local fence.
(cherry picked from commit 762b7e95362170b3e13a8704f38d5e47eca4ba74)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade kernel-obs-build | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-azure-6.8Upgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-xilinxUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-fipsUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-azure-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-nvidiaUpgrade linux-image-gke-64kUpgrade linux-image-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-gkeopUpgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-azureUpgrade linux-image-gcp-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-raspiUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-6.8 | Jun 26, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub