In the Linux kernel, the following vulnerability has been resolved:
accel/habanalabs: support mapping cb with vmalloc-backed coherent memory
When IOMMU is enabled, dma_alloc_coherent() with GFP_USER may return addresses from the vmalloc range. If such an address is mapped without VM_MIXEDMAP, vm_insert_page() will trigger a BUG_ON due to the VM_PFNMAP restriction.
Fix this by checking for vmalloc addresses and setting VM_MIXEDMAP in the VMA before mapping. This ensures safe mapping and avoids kernel crashes. The memory is still driver-allocated and cannot be accessed directly by userspace.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04Upgrade linux-image-gcpUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-raspiUpgrade linux-image-raspi-6.17Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-lowlatencyUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-virtual-6.17Upgrade linux-image-6.17.0-1008-azureUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-oracle-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-azure-6.17Upgrade linux-image-aws-6.17Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-realtime-6.17Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-generic-6.17Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64kUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-gcp-6.17Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-gke-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-6.17Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-azure-fipsUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-oracle-6.17Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-6.17Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-aws-64k-6.17Upgrade linux-image-6.17.0-14-genericUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.17.0-1007-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-oem-22.04bUpgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-fipsUpgrade linux-image-gcp-6.8 | Feb 13, 2026 | Feb 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub