Description
glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | mesa | No fix yet | — |
| Debian 13 | mesa | No fix yet | — |
| Debian 12 | mesa | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | Mesa | 23.3.4-150600.83.3.1 | SUSE-SU-2024:3540-1 |
| SLES 15 SP6 | Mesa-drivers | 21.2.4-150400.68.15.1 | SUSE-SU-2024:3548-1, SUSE-SU-2024:3544-1, SUSE-SU-2024:3540-1 |
| SLES 15 SP5 | Mesa | 22.3.5-150500.77.5.1 | SUSE-SU-2024:3548-1 |
| SLES 15 SP5 | Mesa-drivers | 21.2.4-150400.68.15.1 | SUSE-SU-2024:3548-1, SUSE-SU-2024:3544-1 |
| SLES 12 SP5 | Mesa +1 | 18.3.2-14.9.1 | SUSE-SU-2024:3526-1 |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP5 | Mesa +1 | 18.3.2-14.9.1 | SUSE-SU-2024:3526-1 |
| SLE Micro 6.1 | Mesa +1 | 23.3.4-slfo.1.1_2.1 | SUSE-SU-2025:20664-1 |
| SLE Micro 6.0 | Mesa +1 | 23.3.4-8.1 | SUSE-SU-2025:20082-1 |
| SLE Micro 5.5 | Mesa +1 | 22.3.5-150500.77.5.1 | SUSE-SU-2024:3548-1 |
| SLE Micro 5.4 | Mesa | 21.2.4-150400.68.15.1 | SUSE-SU-2024:3544-1 |
| SLE Micro 5.3 | Mesa | 21.2.4-150400.68.15.1 | SUSE-SU-2024:3544-1 |
| SLE Micro 5.2 | Mesa | 20.2.4-150300.59.9.1 | SUSE-SU-2025:02803-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | Mesa | 24.2.6-392.1 | openSUSE-SU-2024:14475-1 |
| openSUSE Leap 15.6 | Mesa +1 | 23.3.4-150600.83.3.1 | SUSE-SU-2024:3540-1 |
| openSUSE Leap 15.5 | Mesa +1 | 22.3.5-150500.77.5.1 | SUSE-SU-2024:3548-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.5 | Mesa +1 | 22.3.5-150500.77.5.1 | SUSE-SU-2024:3548-1 |
Advisories 8
- SUSE-SU-2025:20082-1 Security update for Mesa SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20664-1 Security update for Mesa SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2024:14475-1 Mesa-24.2.6-392.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3544-1 Security update for Mesa SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:02803-1 Security update for Mesa SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3526-1 Security update for Mesa SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3540-1 Security update for Mesa SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3548-1 Security update for Mesa SUSE / openSUSE Security Updates · Feb 4, 2026