In the Linux kernel, the following vulnerability has been resolved:
drm/xe/eustall: Fix drm_dev_put called before stream disable in close
In xe_eu_stall_stream_close(), drm_dev_put() is called before the stream is disabled and its resources are freed. If this drops the last reference, the device structures could be freed while the subsequent cleanup code still accesses them, leading to a use-after-free.
Fix this by moving drm_dev_put() after all device accesses are complete. This matches the ordering in xe_oa_release().
(cherry picked from commit 35aff528f7297e949e5e19c9cd7fd748cf1cf21c)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jun 26, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-virtualUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-oem-24.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-realtime-64kUpgrade linux-image-gkeUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-oem-24.04dUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-azure-fde-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-generic-7.0Upgrade linux-image-oem-24.04aUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-virtual-7.0Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-oem-7.0Upgrade linux-image-aws-64kUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-gcp-7.0Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-7.0Upgrade linux-image-nvidia-64kUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-genericUpgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-realtimeUpgrade linux-image-gcpUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-oem-24.04bUpgrade linux-image-aws-64k-7.0Upgrade linux-image-oem-24.04cUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-oracle-7.0Upgrade linux-image-nvidia-bosUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-26.04Upgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-nvidiaUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-1009-oemUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-gke-64kUpgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-gke-64k-7.0Upgrade linux-image-awsUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-nvidia-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-gke-7.0Upgrade linux-image-nvidia-64k-7.0 | Jul 20, 2026 | Jun 26, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub