The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
drm/virtio: release the GEM object on virtio_gpu_vram_create() errors
virtio_gpu_vram_create() frees the object with a bare kfree(vram) on both error paths after drm_gem_private_object_init() has run, and on the second one after drm_gem_create_mmap_offset() has linked obj->vma_node into the device's VMA offset manager. The freed object stays in that interval tree, so a later lookup or insertion walks freed memory, and the dma_resv and gpuva lock are never destroyed.
Call drm_gem_object_release() before kfree() on both paths.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-toolsUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-headersUpgrade bpftoolUpgrade kernel-develUpgrade kernel-headersUpgrade kernel6.18-tools-develUpgrade perf6.18Upgrade kernel-tools-debuginfoUpgrade kernel6.18Upgrade kernel-livepatch-6.18.56-125.164Upgrade python3-perf6.18-debuginfoUpgrade kernel-debuginfoUpgrade kernel6.18-develUpgrade microvm-kernel6.18Upgrade kernelUpgrade kernel6.18-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade microvm-kernelUpgrade kernel6.18-modules-extraUpgrade perfUpgrade perf6.18-debuginfoUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel6.18-modules-extra-commonUpgrade kernel-toolsUpgrade bpftool6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade python3-perf6.18Upgrade kernel-livepatch-6.1.189-236.399Upgrade python3-perf-debuginfoUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool6.18-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfo | Nov 2, 2026 | Oct 18, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Oct 28, 2026 | Oct 18, 2026 |
| Redhat_linux | — | No solution exists | Oct 22, 2026 | Oct 18, 2026 |
| Ubuntu | — | Upgrade linux-gkeopUpgrade linux-nvidia-tegra-igxUpgrade linux-bluefieldUpgrade linux-oracle-5.15Upgrade linux-azure-fipsUpgrade linuxUpgrade linux-ibm-5.15Upgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linux-nvidia-tegra-5.15Upgrade linux-nvidia-tegraUpgrade linux-intel-iot-realtimeUpgrade linux-gkeUpgrade linux-hwe-7.0Upgrade linux-intel-iotgUpgrade linux-fipsUpgrade linux-riscv-5.15Upgrade linux-kvmUpgrade linux-realtimeUpgrade linux-nvidiaUpgrade linux-azure-fde-5.15Upgrade linux-azureUpgrade linux-oracleUpgrade linux-azure-5.15Upgrade linux-gcp-5.15Upgrade linux-oem-7.0Upgrade linux-intel-iotg-5.15Upgrade linux-hwe-5.15Upgrade linux-ibmUpgrade linux-aws-fipsUpgrade linux-awsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-riscvUpgrade linux-riscv-7.0Upgrade linux-aws-5.15Upgrade linux-lowlatency | Nov 3, 2026 | Oct 18, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 22, 2026 | Oct 18, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub