In the Linux kernel, the following vulnerability has been resolved:
drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx
Before a5xx Adreno driver will not try fetching UBWC params (because those generations didn't support UBWC anyway), however it's still possible to query UBWC-related params from the userspace, triggering possible NULL pointer dereference. Check for UBWC config in adreno_get_param() and return sane defaults if there is none.
Patchwork: https://patchwork.freedesktop.org/patch/717778/
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-nvidiaUpgrade linux-image-gcp-7.0Upgrade linux-image-7.0.0-1010-azureUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-oracleUpgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64k-7.0Upgrade linux-image-ibm-7.0Upgrade linux-image-azure-fde-7.0Upgrade linux-image-7.0.0-1009-awsUpgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-7.0Upgrade linux-image-aws-64kUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-nvidia-7.0Upgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-nvidia-bosUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-aws-7.0Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-raspi-7.0Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-azure-7.0Upgrade linux-image-azureUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-gcp-64k-7.0 | Jul 21, 2026 | Jul 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub