In the Linux kernel, the following vulnerability has been resolved:
drm/xe/dma-buf: fix UAF with retry loop
Retry doesn't work here, since bo will be freed on error, leading to UAF. However, now that we do the alloc & init before the attach, we can now combine this as one unit and have the init do the alloc for us. This should make the retry safe.
Reported by Sashiko.
v2: Fix up the error unwind (CI)
(cherry picked from commit 479669418253e0f27f8cf5db01a731352ea592e7)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-debug-coreUpgrade rvUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-docUpgrade libperfUpgrade kernel-rtUpgrade kernel-64k-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64kUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-headersUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64k-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-develUpgrade kernel-abi-stablelistsUpgrade kernel-uki-virt-addonsUpgrade perfUpgrade kernel-toolsUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade python3-perfUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-debugUpgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64kUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-develUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade rtlaUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-64k-modulesUpgrade kernel-rt-coreUpgrade kernel-tools-libs | Aug 2, 2026 | Jul 24, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 17, 2026 | Jun 24, 2026 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extra-matchedUpgrade kernel-debuginfo-common-s390xUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade rvUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-develUpgrade kernel-uki-virt-addonsUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debug-modules-coreUpgrade libperf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade perfUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade libperfUpgrade kernel-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-core | Jul 27, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-realtime-7.0Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-aws-64k-7.0Upgrade linux-image-nvidia-bosUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-gke-7.0Upgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-azureUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-oem-26.04aUpgrade linux-image-nvidia-7.0Upgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-oem-24.04cUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-gke-64k-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-oem-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-oem-26.04Upgrade linux-image-realtime-64kUpgrade linux-image-azure-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-generic-7.0Upgrade linux-image-gke-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-aws-64kUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-gkeUpgrade linux-image-gcp-7.0Upgrade linux-image-azure-fde-7.0Upgrade linux-image-awsUpgrade linux-image-7.0.0-1009-oemUpgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-virtual-7.0Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-oem-24.04dUpgrade linux-image-gcpUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-virtualUpgrade linux-image-ibmUpgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-nvidiaUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-1009-awsUpgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-genericUpgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-oracle-7.0Upgrade linux-image-oracleUpgrade linux-image-ibm-7.0Upgrade linux-image-raspi-7.0 | Jul 20, 2026 | Jun 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub