In the Linux kernel, the following vulnerability has been resolved:
drm/tests: shmem: Hold reservation lock around vmap/vunmap
Acquire and release the GEM object's reservation lock around vmap and vunmap operations. The tests use vmap_locked, which led to errors such as show below.
[ 122.292030] WARNING: CPU: 3 PID: 1413 at drivers/gpu/drm/drm_gem_shmem_helper.c:390 drm_gem_shmem_vmap_locked+0x3a3/0x6f0
[ 122.468066] WARNING: CPU: 3 PID: 1413 at drivers/gpu/drm/drm_gem_shmem_helper.c:293 drm_gem_shmem_pin_locked+0x1fe/0x350
[ 122.563504] WARNING: CPU: 3 PID: 1413 at drivers/gpu/drm/drm_gem_shmem_helper.c:234 drm_gem_shmem_get_pages_locked+0x23c/0x370
[ 122.662248] WARNING: CPU: 2 PID: 1413 at drivers/gpu/drm/drm_gem_shmem_helper.c:452 drm_gem_shmem_vunmap_locked+0x101/0x330
Only export the new vmap/vunmap helpers for Kunit tests. These are not interfaces for regular drivers.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-toolsUpgrade kernel6.18Upgrade kernel6.18-modules-extraUpgrade kernel6.18-libbpf-staticUpgrade kernel6.18-headersUpgrade kernel6.18-tools-develUpgrade kernel6.18-libbpfUpgrade kernel-livepatch-6.18.16-18.222Upgrade kernel6.18-debuginfoUpgrade kernel6.18-develUpgrade kernel6.18-tools-debuginfoUpgrade perf6.18-debuginfoUpgrade kernel6.18-libbpf-debuginfoUpgrade kernel6.18-modules-extra-commonUpgrade bpftool6.18Upgrade python3-perf6.18Upgrade python3-perf6.18-debuginfoUpgrade perf6.18Upgrade kernel6.18-libbpf-develUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-debuginfo-common-aarch64Upgrade bpftool6.18-debuginfo | May 19, 2026 | May 8, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub