Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-40393: In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca.
Fixed packages 32
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | mesa-debuginfo | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-debugsource | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-dri-drivers | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-dri-drivers-debuginfo | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-filesystem | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libd3d | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libd3d-debuginfo | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libd3d-devel | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libEGL | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libEGL-debuginfo | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libEGL-devel | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libgbm | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libgbm-debuginfo | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libgbm-devel | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libGL | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libGL-debuginfo | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libGL-devel | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libglapi | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libglapi-debuginfo | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libOpenCL | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libOpenCL-debuginfo | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libOpenCL-devel | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libOSMesa | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libOSMesa-debuginfo | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libOSMesa-devel | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libxatracker | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libxatracker-debuginfo | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-libxatracker-devel | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-va-drivers | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-vdpau-drivers | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-vulkan-drivers | 0:24.2.6-1268.amzn2023.0.1 |
| Amazon Linux · 2023 | mesa-vulkan-drivers-debuginfo | 0:24.2.6-1268.amzn2023.0.1 |
Vulnerabilities 1
-
High 8.1
In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2026-40393.html