Description
Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId(). This vulnerability is triggered when the X11 server sends an DRI2_BufferSwapComplete event unexpectedly when the application is using DRI3. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | mesa | No fix yet | — |
| Debian 13 | mesa | No fix yet | — |
| Debian 12 | mesa | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | Mesa | 23.3.4-150600.83.3.1 | SUSE-SU-2024:3540-1 |
| SLES 15 SP6 | Mesa-drivers | 21.2.4-150400.68.15.1 | SUSE-SU-2024:3548-1, SUSE-SU-2024:3544-1, SUSE-SU-2024:3540-1 |
| SLES 15 SP5 | Mesa | 22.3.5-150500.77.5.1 | SUSE-SU-2024:3548-1 |
| SLES 15 SP5 | Mesa-drivers | 21.2.4-150400.68.15.1 | SUSE-SU-2024:3548-1, SUSE-SU-2024:3544-1 |
| SLES 12 SP5 | Mesa +1 | 18.3.2-14.9.1 | SUSE-SU-2024:3526-1 |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP5 | Mesa +1 | 18.3.2-14.9.1 | SUSE-SU-2024:3526-1 |
| SLE Micro 6.1 | Mesa +1 | 23.3.4-slfo.1.1_2.1 | SUSE-SU-2025:20664-1 |
| SLE Micro 6.0 | Mesa +1 | 23.3.4-8.1 | SUSE-SU-2025:20082-1 |
| SLE Micro 5.5 | Mesa +1 | 22.3.5-150500.77.5.1 | SUSE-SU-2024:3548-1 |
| SLE Micro 5.4 | Mesa | 21.2.4-150400.68.15.1 | SUSE-SU-2024:3544-1 |
| SLE Micro 5.3 | Mesa | 21.2.4-150400.68.15.1 | SUSE-SU-2024:3544-1 |
| SLE Micro 5.2 | Mesa | 20.2.4-150300.59.9.1 | SUSE-SU-2025:02803-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | Mesa | 24.2.6-392.1 | openSUSE-SU-2024:14475-1 |
| openSUSE Leap 15.6 | Mesa +1 | 23.3.4-150600.83.3.1 | SUSE-SU-2024:3540-1 |
| openSUSE Leap 15.5 | Mesa +1 | 22.3.5-150500.77.5.1 | SUSE-SU-2024:3548-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.5 | Mesa +1 | 22.3.5-150500.77.5.1 | SUSE-SU-2024:3548-1 |
Advisories 8
- SUSE-SU-2025:20082-1 Security update for Mesa SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20664-1 Security update for Mesa SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2024:14475-1 Mesa-24.2.6-392.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3544-1 Security update for Mesa SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:02803-1 Security update for Mesa SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3526-1 Security update for Mesa SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3540-1 Security update for Mesa SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3548-1 Security update for Mesa SUSE / openSUSE Security Updates · Feb 4, 2026