Summary
It was discovered that Mesa did not properly validate memory allocation
sizes in WebGPU under certain circumstances. An attacker could use this
issue to cause Mesa to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | mesa | 23.2.1-1ubuntu3.1~22.04.4 |
| Ubuntu · 24.04 LTS 24.04:LTS | mesa | 25.2.8-0ubuntu0.24.04.2 |
| Ubuntu · 25.10 | mesa | 25.2.8-0ubuntu0.25.10.2 |
Vulnerabilities 1
-
High 8.1
In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be…
References
-
report
https://ubuntu.com/security/CVE-2026-40393