In the Linux kernel, the following vulnerability has been resolved:
drm/v3d: Fix vaddr leak when indirect CSD has zeroed workgroups
v3d_rewrite_csd_job_wg_counts_from_indirect() maps both the indirect buffer and the workgroup buffer and is expected to release them before returning. When any of the workgroup counts read from the buffer is zero, the function bailed out early and skipped the cleanup, leaking the vaddr mappings of both BOs.
Jump to the cleanup path instead of returning directly, so the mappings are always dropped.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-1019-raspi-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-realtimeUpgrade linux-image-7.0.0-31-generic-64kUpgrade linux-image-7.0.0-2018-nvidia-bos-64kUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-ibm-7.0Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-generic-7.0Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-oem-26.04bUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-7.0.0-1006-gke-64kUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-7.0.0-31-genericUpgrade linux-image-virtual-7.0Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-aws-64kUpgrade linux-image-ibmUpgrade linux-image-7.0.0-1013-oemUpgrade linux-image-oracleUpgrade linux-image-oem-7.0Upgrade linux-image-7.0.0-2018-nvidia-bosUpgrade linux-image-7.0.0-1012-aws-64kUpgrade linux-image-oracle-7.0Upgrade linux-image-7.0.0-1013-ibmUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-generic-64k-7.0Upgrade linux-image-azure-7.0Upgrade linux-image-gcp-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-1019-raspiUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-nvidia-bosUpgrade linux-image-nvidia-7.0Upgrade linux-image-gke-7.0Upgrade linux-image-azureUpgrade linux-image-7.0.0-31-realtimeUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-oem-26.04aUpgrade linux-image-genericUpgrade linux-image-gcp-64kUpgrade linux-image-azure-lts-26.04Upgrade linux-image-7.0.0-1018-nvidiaUpgrade linux-image-raspi-7.0Upgrade linux-image-7.0.0-1018-nvidia-64kUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-7.0.0-1006-gkeUpgrade linux-image-7.0.0-31-realtime-64kUpgrade linux-image-realtime-64kUpgrade linux-image-nvidiaUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-raspiUpgrade linux-image-aws-7.0Upgrade linux-image-gke-64k-7.0Upgrade linux-image-gke-64kUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-oem-26.04Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-7.0.0-1012-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws | Sep 14, 2026 | Sep 7, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 13, 2026 | Jun 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub