Debian/mesa: critical 9.8
In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca.
Action: Upgrade mesa to 25.0.7-2+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 25.0.7-2+deb13u1 | - |
Fixed versions
| 25.0.7-2+deb13u1 |
Sources
- osv: DEBIAN-CVE-2026-40393#Debian:13/mesa
- https://security-tracker.debian.org/tracker/CVE-2026-40393
published · modified · JSON