In the Linux kernel, the following vulnerability has been resolved:
drm/xe/dma-buf: fix UAF with retry loop
Retry doesn't work here, since bo will be freed on error, leading to UAF. However, now that we do the alloc & init before the attach, we can now combine this as one unit and have the init do the alloc for us. This should make the retry safe.
Reported by Sashiko.
v2: Fix up the error unwind (CI)
(cherry picked from commit 479669418253e0f27f8cf5db01a731352ea592e7)
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade libperfUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-uki-virtUpgrade kernel-64k-debug-devel-matchedUpgrade python3-perfUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-64kUpgrade kernel-debug-modules-coreUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-debug-modulesUpgrade rtlaUpgrade kernel-rt-64k-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-64k-modulesUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debugUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-modules-coreUpgrade rvUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64kUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-devel | Aug 2, 2026 | Jul 24, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 17, 2026 | Jun 24, 2026 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade rvUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-libs-develUpgrade libperf-debuginfoUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-debug-uki-virtUpgrade kernel-rtUpgrade kernel-debuginfo-common-s390xUpgrade kernel-develUpgrade kernel-modules-extra-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-develUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-debug-debuginfoUpgrade libperfUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade rtlaUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-uki-virt | Jul 27, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-azure-fde-7.0Upgrade linux-image-gcp-7.0Upgrade linux-image-oracle-64kUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-7.0.0-1009-oemUpgrade linux-image-virtual-7.0Upgrade linux-image-aws-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidiaUpgrade linux-image-oracleUpgrade linux-image-oracle-7.0Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-awsUpgrade linux-image-oem-24.04dUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-ibmUpgrade linux-image-raspi-7.0Upgrade linux-image-ibm-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-generic-7.0Upgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gke-64k-7.0Upgrade linux-image-7.0.0-28-genericUpgrade linux-image-nvidia-7.0Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-gke-64kUpgrade linux-image-gke-7.0Upgrade linux-image-nvidia-bosUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-oem-24.04cUpgrade linux-image-realtimeUpgrade linux-image-oem-26.04Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-oem-7.0Upgrade linux-image-azure-fdeUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-realtime-64kUpgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-realtime-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-oem-26.04aUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-generic-64kUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-azureUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-generic-hwe-26.04 | Jul 20, 2026 | Jun 24, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub