In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Use local fence in error path of xe_migrate_clear
The intent of the error path in xe_migrate_clear is to wait on locally generated fence and then return. The code is waiting on m->fence which could be the local fence but this is only stable under the job mutex leading to a possible UAF. Fix code to wait on local fence.
(cherry picked from commit 762b7e95362170b3e13a8704f38d5e47eca4ba74)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade kernel-obs-build | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-64kUpgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-azure-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-kvmUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gkeUpgrade linux-image-xilinxUpgrade linux-image-virtualUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-ibm-classicUpgrade linux-image-gkeopUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-aws-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-gke-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-lowlatency-64k | Jun 26, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub