
CVE catalog
CVE-2026-40393
In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca.
- Severity
- High · CVSS 8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.43% · Oct 25, 2026
In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | mesa | sid | 26.2.5-1 | fixed |
| Debian | mesa | forky | 26.1.6-1 | fixed |
| Debian | mesa | trixie | 25.0.7-2+deb13u1 | fixed |
| Debian | mesa | bookworm | 22.3.6-1+deb12u2 | fixed |
| Cpe | mesa | Not reported | 25.2.8-0ubuntu0.24.04.2 | fixed |
| Cpe | libegl-mesa0 | Not reported | 25.2.8-0ubuntu0.24.04.2 | fixed |
| Cpe | libegl1-mesa-dev | Not reported | 25.2.8-0ubuntu0.24.04.2 | fixed |
| Cpe | libgbm-dev | Not reported | 25.2.8-0ubuntu0.24.04.2 | fixed |
| Cpe | libgbm1 | Not reported | 25.2.8-0ubuntu0.24.04.2 | fixed |
| Cpe | libgl1-mesa-dev | Not reported | 25.2.8-0ubuntu0.24.04.2 | fixed |
| Cpe | libgl1-mesa-dri | Not reported | 25.2.8-0ubuntu0.24.04.2 | fixed |
| Cpe | libgles2-mesa-dev | Not reported | 25.2.8-0ubuntu0.24.04.2 | fixed |
| Cpe | libglx-mesa0 | Not reported | 25.2.8-0ubuntu0.24.04.2 | fixed |
| Cpe | mesa-common-dev | Not reported | 25.2.8-0ubuntu0.24.04.2 | fixed |
| Cpe | mesa-drm-shim | Not reported | 25.2.8-0ubuntu0.24.04.2 | fixed |
| Cpe | mesa-libgallium | Not reported | 25.2.8-0ubuntu0.24.04.2 | fixed |
| Cpe | mesa-opencl-icd | Not reported | 25.2.8-0ubuntu0.24.04.2 | fixed |
| Cpe | mesa-teflon-delegate | Not reported | 25.2.8-0ubuntu0.24.04.2 | fixed |
| Cpe | mesa-va-drivers | Not reported | 25.2.8-0ubuntu0.24.04.2 | fixed |
| Cpe | mesa-vdpau-drivers | Not reported | 25.2.8-0ubuntu0.24.04.2 | fixed |
| Cpe | mesa-vulkan-drivers | Not reported | 25.2.8-0ubuntu0.24.04.2 | fixed |
| Cpe | mesa | Not reported | 25.3.6 | fixed |
| Cpe | mesa | Not reported | Not reported | unknown |
| Ubuntu | mesa | 22.04 | 21.2.2-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 22.04 | 21.3.5-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 22.04 | 22.0.0-0ubuntu2 | vulnerable |
| Ubuntu | mesa | 22.04 | 22.0.1-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 22.04 | 22.0.1-1ubuntu2 | vulnerable |
| Ubuntu | mesa | 22.04 | 22.0.1-1ubuntu2.1 | vulnerable |
| Ubuntu | mesa | 22.04 | 22.0.5-0ubuntu0.1 | vulnerable |
| Ubuntu | mesa | 22.04 | 22.0.5-0ubuntu0.3 | vulnerable |
| Ubuntu | mesa | 22.04 | 22.2.5-0ubuntu0.1~22.04.1 | vulnerable |
| Ubuntu | mesa | 22.04 | 22.2.5-0ubuntu0.1~22.04.2 | vulnerable |
| Ubuntu | mesa | 22.04 | 22.2.5-0ubuntu0.1~22.04.3 | vulnerable |
| Ubuntu | mesa | 22.04 | 23.0.4-0ubuntu1~22.04.1 | vulnerable |
| Ubuntu | mesa | 22.04 | 23.2.1-1ubuntu3.1~22.04.2 | vulnerable |
| Ubuntu | mesa | 22.04 | 23.2.1-1ubuntu3.1~22.04.3 | vulnerable |
| Ubuntu | mesa | 22.04 | 23.2.1-1ubuntu3.1~22.04.4 | fixed |
| Ubuntu | mesa | 24.04 | 23.2.1-1ubuntu3 | vulnerable |
| Ubuntu | mesa | 24.04 | 23.2.1-1ubuntu4 | vulnerable |
| Ubuntu | mesa | 24.04 | 23.3.0-2ubuntu3 | vulnerable |
| Ubuntu | mesa | 24.04 | 23.3.3-1ubuntu2 | vulnerable |
| Ubuntu | mesa | 24.04 | 24.0.1-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 24.04 | 24.0.3-1ubuntu3 | vulnerable |
| Ubuntu | mesa | 24.04 | 24.0.3-1ubuntu4 | vulnerable |
| Ubuntu | mesa | 24.04 | 24.0.5-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 24.04 | 24.0.9-0ubuntu0.1 | vulnerable |
| Ubuntu | mesa | 24.04 | 24.0.9-0ubuntu0.2 | vulnerable |
| Ubuntu | mesa | 24.04 | 24.0.9-0ubuntu0.3 | vulnerable |
| Ubuntu | mesa | 24.04 | 24.2.8-1ubuntu1~24.04.1 | vulnerable |
| Ubuntu | mesa | 24.04 | 25.0.7-0ubuntu0.24.04.1 | vulnerable |
| Ubuntu | mesa | 24.04 | 25.0.7-0ubuntu0.24.04.2 | vulnerable |
| Ubuntu | mesa | 24.04 | 25.2.8-0ubuntu0.24.04.1 | vulnerable |
| Ubuntu | mesa | 24.04 | 25.2.8-0ubuntu0.24.04.2 | fixed |
| Ubuntu | mesa | 25.10 | 25.0.3-1ubuntu2 | vulnerable |
| Ubuntu | mesa | 25.10 | 25.0.7-0ubuntu1 | vulnerable |
| Ubuntu | mesa | 25.10 | 25.0.7-0ubuntu2 | vulnerable |
| Ubuntu | mesa | 25.10 | 25.0.7-0ubuntu3 | vulnerable |
| Ubuntu | mesa | 25.10 | 25.1.5-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 25.10 | 25.1.7-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 25.10 | 25.2.1-2ubuntu1 | vulnerable |
| Ubuntu | mesa | 25.10 | 25.2.2-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 25.10 | 25.2.3-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 25.10 | 25.2.8-0ubuntu0.25.10.1 | vulnerable |
| Ubuntu | mesa | 25.10 | 25.2.8-0ubuntu0.25.10.2 | fixed |
| Ubuntu | mesa | 14.04 | 9.2.1-1ubuntu3 | vulnerable |
| Ubuntu | mesa | 14.04 | 9.2.2-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 14.04 | 9.2.2-1ubuntu2 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.0.0-1ubuntu2 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.0.0-1ubuntu3 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.0.0-1ubuntu4 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.0.1-1ubuntu2 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.1.0~rc1-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.1.0~rc1-1ubuntu3 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.1.0~rc1-1ubuntu4 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.1.0~rc3-0ubuntu1 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.1.0~rc3-0ubuntu2 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.1.0~rc3-0ubuntu3 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.1.0-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.1.0-4ubuntu1 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.1.0-4ubuntu2 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.1.0-4ubuntu4 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.1.0-4ubuntu5 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.1.3-0ubuntu0.1 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.1.3-0ubuntu0.2 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.1.3-0ubuntu0.3 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.1.3-0ubuntu0.4 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.1.3-0ubuntu0.5 | vulnerable |
| Ubuntu | mesa | 14.04 | 10.1.3-0ubuntu0.6 | vulnerable |
| Ubuntu | mesa | 16.04 | 11.0.2-1ubuntu4 | vulnerable |
| Ubuntu | mesa | 16.04 | 11.0.4-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 16.04 | 11.0.5-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 16.04 | 11.0.5-1ubuntu2 | vulnerable |
| Ubuntu | mesa | 16.04 | 11.0.6-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 16.04 | 11.0.7-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 16.04 | 11.0.8-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 16.04 | 11.1.1-1ubuntu2 | vulnerable |
| Ubuntu | mesa | 16.04 | 11.1.2-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 16.04 | 11.1.2-1ubuntu2 | vulnerable |
| Ubuntu | mesa | 16.04 | 11.2.0-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 16.04 | 11.2.0-1ubuntu2 | vulnerable |
| Ubuntu | mesa | 16.04 | 11.2.0-1ubuntu2.1 | vulnerable |
| Ubuntu | mesa | 16.04 | 11.2.0-1ubuntu2.2 | vulnerable |
| Ubuntu | mesa | 16.04 | 12.0.6-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mesa | 16.04 | 17.0.7-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | mesa | 16.04 | 17.0.7-0ubuntu0.16.04.2 | vulnerable |
| Ubuntu | mesa | 16.04 | 17.2.4-0ubuntu1~16.04.2 | vulnerable |
| Ubuntu | mesa | 16.04 | 17.2.4-0ubuntu1~16.04.4 | vulnerable |
| Ubuntu | mesa | 16.04 | 17.2.8-0ubuntu0~16.04.1 | vulnerable |
| Ubuntu | mesa | 16.04 | 18.0.5-0ubuntu0~16.04.1 | vulnerable |
| Ubuntu | mesa | 18.04 | 17.2.2-0ubuntu1 | vulnerable |
| Ubuntu | mesa | 18.04 | 17.2.4-0ubuntu2 | vulnerable |
| Ubuntu | mesa | 18.04 | 17.3.3-0ubuntu1 | vulnerable |
| Ubuntu | mesa | 18.04 | 18.0.0~rc4-1ubuntu3 | vulnerable |
| Ubuntu | mesa | 18.04 | 18.0.0~rc5-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 18.04 | 18.0.5-0ubuntu0~18.04.1 | vulnerable |
| Ubuntu | mesa | 18.04 | 18.2.2-0ubuntu1~18.04.1 | vulnerable |
| Ubuntu | mesa | 18.04 | 18.2.2-0ubuntu1~18.04.2 | vulnerable |
| Ubuntu | mesa | 18.04 | 18.2.8-0ubuntu0~18.04.2 | vulnerable |
| Ubuntu | mesa | 18.04 | 19.0.2-1ubuntu1.1~18.04.1 | vulnerable |
| Ubuntu | mesa | 18.04 | 19.0.2-1ubuntu1.1~18.04.2 | vulnerable |
| Ubuntu | mesa | 18.04 | 19.0.8-0ubuntu0~18.04.1 | vulnerable |
| Ubuntu | mesa | 18.04 | 19.0.8-0ubuntu0~18.04.2 | vulnerable |
| Ubuntu | mesa | 18.04 | 19.0.8-0ubuntu0~18.04.3 | vulnerable |
| Ubuntu | mesa | 18.04 | 19.2.1-1ubuntu1~18.04.1 | vulnerable |
| Ubuntu | mesa | 18.04 | 19.2.8-0ubuntu0~18.04.1 | vulnerable |
| Ubuntu | mesa | 18.04 | 19.2.8-0ubuntu0~18.04.2 | vulnerable |
| Ubuntu | mesa | 18.04 | 19.2.8-0ubuntu0~18.04.3 | vulnerable |
| Ubuntu | mesa | 18.04 | 20.0.8-0ubuntu1~18.04.1 | vulnerable |
| Ubuntu | mesa | 20.04 | 19.2.1-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 20.04 | 19.2.4-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 20.04 | 19.3.3-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 20.04 | 20.0.0-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 20.04 | 20.0.2-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 20.04 | 20.0.4-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 20.04 | 20.0.4-2ubuntu1 | vulnerable |
| Ubuntu | mesa | 20.04 | 20.0.8-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | mesa | 20.04 | 20.2.6-0ubuntu0.20.04.1 | vulnerable |
| Ubuntu | mesa | 20.04 | 21.0.3-0ubuntu0.2~20.04.1 | vulnerable |
| Ubuntu | mesa | 20.04 | 21.0.3-0ubuntu0.3~20.04.1 | vulnerable |
| Ubuntu | mesa | 20.04 | 21.0.3-0ubuntu0.3~20.04.2 | vulnerable |
| Ubuntu | mesa | 20.04 | 21.0.3-0ubuntu0.3~20.04.3 | vulnerable |
| Ubuntu | mesa | 20.04 | 21.0.3-0ubuntu0.3~20.04.4 | vulnerable |
| Ubuntu | mesa | 20.04 | 21.0.3-0ubuntu0.3~20.04.5 | vulnerable |
| Ubuntu | mesa | 20.04 | 21.2.6-0ubuntu0.1~20.04.1 | vulnerable |
| Ubuntu | mesa | 20.04 | 21.2.6-0ubuntu0.1~20.04.2 | vulnerable |
| Ubuntu | mesa | 22.04 | 21.2.2-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 22.04 | 21.3.5-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 22.04 | 22.0.0-0ubuntu2 | vulnerable |
| Ubuntu | mesa | 22.04 | 22.0.1-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 22.04 | 22.0.1-1ubuntu2 | vulnerable |
| Ubuntu | mesa | 22.04 | 22.0.1-1ubuntu2.1 | vulnerable |
| Ubuntu | mesa | 22.04 | 22.0.5-0ubuntu0.1 | vulnerable |
| Ubuntu | mesa | 22.04 | 22.0.5-0ubuntu0.3 | vulnerable |
| Ubuntu | mesa | 22.04 | 22.2.5-0ubuntu0.1~22.04.1 | vulnerable |
| Ubuntu | mesa | 22.04 | 22.2.5-0ubuntu0.1~22.04.2 | vulnerable |
| Ubuntu | mesa | 22.04 | 22.2.5-0ubuntu0.1~22.04.3 | vulnerable |
| Ubuntu | mesa | 22.04 | 23.0.4-0ubuntu1~22.04.1 | vulnerable |
| Ubuntu | mesa | 22.04 | 23.2.1-1ubuntu3.1~22.04.2 | vulnerable |
| Ubuntu | mesa | 22.04 | 23.2.1-1ubuntu3.1~22.04.3 | vulnerable |
| Ubuntu | mesa | 22.04 | 23.2.1-1ubuntu3.1~22.04.4 | fixed |
| Ubuntu | mesa | 24.04 | 23.2.1-1ubuntu3 | vulnerable |
| Ubuntu | mesa | 24.04 | 23.2.1-1ubuntu4 | vulnerable |
| Ubuntu | mesa | 24.04 | 23.3.0-2ubuntu3 | vulnerable |
| Ubuntu | mesa | 24.04 | 23.3.3-1ubuntu2 | vulnerable |
| Ubuntu | mesa | 24.04 | 24.0.1-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 24.04 | 24.0.3-1ubuntu3 | vulnerable |
| Ubuntu | mesa | 24.04 | 24.0.3-1ubuntu4 | vulnerable |
| Ubuntu | mesa | 24.04 | 24.0.5-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 24.04 | 24.0.9-0ubuntu0.1 | vulnerable |
| Ubuntu | mesa | 24.04 | 24.0.9-0ubuntu0.2 | vulnerable |
| Ubuntu | mesa | 24.04 | 24.0.9-0ubuntu0.3 | vulnerable |
| Ubuntu | mesa | 24.04 | 24.2.8-1ubuntu1~24.04.1 | vulnerable |
| Ubuntu | mesa | 24.04 | 25.0.7-0ubuntu0.24.04.1 | vulnerable |
| Ubuntu | mesa | 24.04 | 25.0.7-0ubuntu0.24.04.2 | vulnerable |
| Ubuntu | mesa | 24.04 | 25.2.8-0ubuntu0.24.04.1 | vulnerable |
| Ubuntu | mesa | 24.04 | 25.2.8-0ubuntu0.24.04.2 | fixed |
| Ubuntu | mesa | 25.10 | 25.0.3-1ubuntu2 | vulnerable |
| Ubuntu | mesa | 25.10 | 25.0.7-0ubuntu1 | vulnerable |
| Ubuntu | mesa | 25.10 | 25.0.7-0ubuntu2 | vulnerable |
| Ubuntu | mesa | 25.10 | 25.0.7-0ubuntu3 | vulnerable |
| Ubuntu | mesa | 25.10 | 25.1.5-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 25.10 | 25.1.7-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 25.10 | 25.2.1-2ubuntu1 | vulnerable |
| Ubuntu | mesa | 25.10 | 25.2.2-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 25.10 | 25.2.3-1ubuntu1 | vulnerable |
| Ubuntu | mesa | 25.10 | 25.2.8-0ubuntu0.25.10.1 | vulnerable |
| Ubuntu | mesa | 25.10 | 25.2.8-0ubuntu0.25.10.2 | fixed |
| Suse | Mesa | linux enterprise micro 5.2 | 20.2.4-150300.59.12.1 | fixed |
| Cpe | mesa | Not reported | Not reported | unknown |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | mesa | source | sid | 26.0.1-1 | not yet assigned | Not reported | Not reported |
| Debian | mesa | source | forky | 26.0.1-1 | not yet assigned | Not reported | Not reported |
| Debian | mesa | source | trixie | 25.0.7-2+deb13u1 | not yet assigned | Not reported | Not reported |
| Debian | mesa | source | bookworm | 22.3.6-1+deb12u2 | not yet assigned | Not reported | Not reported |
| Cpe | mesa | cpe | Not reported | 25.2.8-0ubuntu0.24.04.2 | Not reported | Not reported | Not reported |
| Cpe | libegl-mesa0 | cpe | Not reported | 25.2.8-0ubuntu0.24.04.2 | Not reported | Not reported | Not reported |
| Cpe | libegl1-mesa-dev | cpe | Not reported | 25.2.8-0ubuntu0.24.04.2 | Not reported | Not reported | Not reported |
| Cpe | libgbm-dev | cpe | Not reported | 25.2.8-0ubuntu0.24.04.2 | Not reported | Not reported | Not reported |
| Cpe | libgbm1 | cpe | Not reported | 25.2.8-0ubuntu0.24.04.2 | Not reported | Not reported | Not reported |
| Cpe | libgl1-mesa-dev | cpe | Not reported | 25.2.8-0ubuntu0.24.04.2 | Not reported | Not reported | Not reported |
| Cpe | libgl1-mesa-dri | cpe | Not reported | 25.2.8-0ubuntu0.24.04.2 | Not reported | Not reported | Not reported |
| Cpe | libgles2-mesa-dev | cpe | Not reported | 25.2.8-0ubuntu0.24.04.2 | Not reported | Not reported | Not reported |
| Cpe | libglx-mesa0 | cpe | Not reported | 25.2.8-0ubuntu0.24.04.2 | Not reported | Not reported | Not reported |
| Cpe | mesa-common-dev | cpe | Not reported | 25.2.8-0ubuntu0.24.04.2 | Not reported | Not reported | Not reported |
| Cpe | mesa-drm-shim | cpe | Not reported | 25.2.8-0ubuntu0.24.04.2 | Not reported | Not reported | Not reported |
| Cpe | mesa-libgallium | cpe | Not reported | 25.2.8-0ubuntu0.24.04.2 | Not reported | Not reported | Not reported |
| Cpe | mesa-opencl-icd | cpe | Not reported | 25.2.8-0ubuntu0.24.04.2 | Not reported | Not reported | Not reported |
| Cpe | mesa-teflon-delegate | cpe | Not reported | 25.2.8-0ubuntu0.24.04.2 | Not reported | Not reported | Not reported |
| Cpe | mesa-va-drivers | cpe | Not reported | 25.2.8-0ubuntu0.24.04.2 | Not reported | Not reported | Not reported |
| Cpe | mesa-vdpau-drivers | cpe | Not reported | 25.2.8-0ubuntu0.24.04.2 | Not reported | Not reported | Not reported |
| Cpe | mesa-vulkan-drivers | cpe | Not reported | 25.2.8-0ubuntu0.24.04.2 | Not reported | Not reported | Not reported |
| Cpe | mesa | cpe | Not reported | 25.3.6 | Not reported | Not reported | Not reported |
| Ubuntu | mesa | deb | 22.04 | 23.2.1-1ubuntu3.1~22.04.4 | Not reported | USN-8427-1 | Not reported |
| Ubuntu | mesa | deb | 24.04 | 25.2.8-0ubuntu0.24.04.2 | Not reported | USN-8427-1 | Not reported |
| Ubuntu | mesa | deb | 25.10 | 25.2.8-0ubuntu0.25.10.2 | Not reported | USN-8427-1 | Not reported |
| Ubuntu | mesa | deb | 22.04 | 23.2.1-1ubuntu3.1~22.04.4 | Not reported | UBUNTU-CVE-2026-40393 | Not reported |
| Ubuntu | mesa | deb | 24.04 | 25.2.8-0ubuntu0.24.04.2 | Not reported | UBUNTU-CVE-2026-40393 | Not reported |
| Ubuntu | mesa | deb | 25.10 | 25.2.8-0ubuntu0.25.10.2 | Not reported | UBUNTU-CVE-2026-40393 | Not reported |
| Suse | Mesa | rpm | linux enterprise micro 5.2 | 20.2.4-150300.59.12.1 | Not reported | SUSE-SU-2026:1343-1 | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [libd3dadapter9-mesa]Fixed
Source package: [mesa]
Details (4)
22.3.6-1+deb12u2· amd64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
22.3.6-1+deb12u2· arm64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
- [libd3dadapter9-mesa-dev]Fixed
Source package: [mesa]
Details (4)
22.3.6-1+deb12u2· amd64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
22.3.6-1+deb12u2· arm64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
- [libegl1-mesa]Fixed
Source package: [mesa]
Details (2)
22.3.6-1+deb12u2· amd64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
22.3.6-1+deb12u2· arm64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
- [libegl1-mesa-dev]Fixed
Source package: [mesa]
Details (4)
22.3.6-1+deb12u2· amd64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
22.3.6-1+deb12u2· arm64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
- [libegl-mesa0]Fixed
Source package: [mesa]
Details (4)
22.3.6-1+deb12u2· amd64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
22.3.6-1+deb12u2· arm64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
- [libgbm1]Fixed
Source package: [mesa]
Details (4)
22.3.6-1+deb12u2· amd64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
22.3.6-1+deb12u2· arm64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
- [libgbm-dev]Fixed
Source package: [mesa]
Details (4)
22.3.6-1+deb12u2· amd64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
22.3.6-1+deb12u2· arm64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
- [libgl1-mesa-dev]Fixed
Source package: [mesa]
Details (4)
22.3.6-1+deb12u2· amd64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
22.3.6-1+deb12u2· arm64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
- [libgl1-mesa-dri]Fixed
Source package: [mesa]
Details (4)
22.3.6-1+deb12u2· amd64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
22.3.6-1+deb12u2· arm64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
- [libgl1-mesa-glx]Fixed
Source package: [mesa]
Details (2)
22.3.6-1+deb12u2· amd64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
22.3.6-1+deb12u2· arm64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
- [libglapi-mesa]Fixed
Source package: [mesa]
Details (2)
22.3.6-1+deb12u2· amd64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
22.3.6-1+deb12u2· arm64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
- [libgles2-mesa]Fixed
Source package: [mesa]
Details (2)
22.3.6-1+deb12u2· amd64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
22.3.6-1+deb12u2· arm64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
- [libgles2-mesa-dev]Fixed
Source package: [mesa]
Details (4)
22.3.6-1+deb12u2· amd64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
22.3.6-1+deb12u2· arm64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
- [libglx-mesa0]Fixed
Source package: [mesa]
Details (4)
22.3.6-1+deb12u2· amd64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
22.3.6-1+deb12u2· arm64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
- [libosmesa6]Fixed
Source package: [mesa]
Details (4)
22.3.6-1+deb12u2· amd64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
22.3.6-1+deb12u2· arm64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
- [libosmesa6-dev]Fixed
Source package: [mesa]
Details (4)
22.3.6-1+deb12u2· amd64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
22.3.6-1+deb12u2· arm64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
- [libwayland-egl1-mesa]Fixed
Source package: [mesa]
Details (2)
22.3.6-1+deb12u2· amd64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
22.3.6-1+deb12u2· arm64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
- [libxatracker2]Fixed
Source package: [mesa]
Details (2)
22.3.6-1+deb12u2· amd64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
- [libxatracker-dev]Fixed
Source package: [mesa]
Details (2)
22.3.6-1+deb12u2· amd64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
- [mesa-common-dev]Fixed
Source package: [mesa]
Details (4)
22.3.6-1+deb12u2· amd64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
22.3.6-1+deb12u2· arm64 · bookwormFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
25.0.7-2~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
22.3.6-1+deb12u2nvd · mesa · debian · bookworm; nvd · mesa · debian · 12
Observed:
References
- [https://ftp.suse.com/pub/projects/security/]
- [https://gitlab.freedesktop.org/mesa/mesa/-/merge_requests/39866]
- [https://lists.debian.org/debian-lts-announce/2026/07/msg00021.html]
- [https://lists.freedesktop.org/archives/mesa-dev/2026-February/226597.html]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-40393]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-40393]
- [https://osv.dev/vulnerability/SUSE-SU-2026:1343-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2026-40393]
- [https://osv.dev/vulnerability/USN-8427-1]
- [https://security-tracker.debian.org/tracker/CVE-2026-40393]
- [https://ubuntu.com/security/notices/USN-8427-1]
[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]