In the Linux kernel, the following vulnerability has been resolved:
drm/panthor: Fix UAF on kernel BO VA nodes
If the MMU is down, panthor_vm_unmap_range() might return an error. We expect the page table to be updated still, and if the MMU is blocked, the rest of the GPU should be blocked too, so no risk of accessing physical memory returned to the system (which the current code doesn't cover for anyway).
Proceed with the rest of the cleanup instead of bailing out and leaving the va_node inserted in the drm_mm, which leads to UAF when other adjacent nodes are removed from the drm_mm tree.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-oem-24.04bUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.17.0-1009-oracleUpgrade linux-image-raspiUpgrade linux-image-aws-64k-6.17Upgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-gcp-64kUpgrade linux-image-generic-6.17Upgrade linux-image-generic-64k-6.17Upgrade linux-image-6.17.0-1009-gcpUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-virtual-6.17Upgrade linux-image-oem-24.04Upgrade linux-image-azure-6.17Upgrade linux-image-aws-6.17Upgrade linux-image-6.17.0-1009-aws-64kUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-realtime-6.17Upgrade linux-image-6.17.0-1009-awsUpgrade linux-image-6.17.0-1009-gcp-64kUpgrade linux-image-oracle-6.17Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-6.17Upgrade linux-image-oem-24.04dUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.17.0-19-genericUpgrade linux-image-6.17.0-1017-oemUpgrade linux-image-6.17.0-19-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.17.0-1010-raspiUpgrade linux-image-6.17.0-1008-realtimeUpgrade linux-image-6.17.0-1010-azureUpgrade linux-image-6.17.0-1009-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-oem-24.04cUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-raspi-6.17Upgrade linux-image-awsUpgrade linux-image-oem-6.17Upgrade linux-image-oem-24.04a | Mar 17, 2026 | Dec 24, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub