[CLSA-2026:1787314086] Fix CVE(s): CVE-2026-40393
Type:
security
Severity:
Critical
Release date:
2026-08-21 12:08:18 UTC
Description:
* SECURITY UPDATE: out-of-bounds memory access from an unbounded stack allocation in the SPIR-V front end (ELSCVE-171724) - debian/patches/backport-STACK_ARRAY.patch: add the upstream src/util/stack_array.h helper, which the fix requires. - debian/patches/CVE-2026-40393.patch: replace NIR_VLA, a bare alloca, with STACK_ARRAY at the two sites whose element count comes from the shader, in src/compiler/spirv/spirv_to_nir.c and src/compiler/nir/nir_inline_functions.c. - CVE-2026-40393
CVEs fixed:
Updated packages:
  • libd3dadapter9-mesa_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:745eda5254393b76cd0d408b568fcae1efdd4829
  • libd3dadapter9-mesa-dev_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:d2db005e7e6aaa00a679a93861e804337dda28b6
  • libegl-mesa0_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:d86da4f89469ef613600e8bc0b09f1d8227c0fc2
  • libegl1-mesa_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:82226a3cee04da207512670bf8276d6394062090
  • libegl1-mesa-dev_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:f4972fde6df043e0f4f83bf15fbc7289e106a4fe
  • libgbm-dev_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:da3f4cc7dee2c3e18103ac5c60d71837e185c563
  • libgbm1_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:e05b4463e7bdc2ffe91edbdf86a8f6f313c33a17
  • libgl1-mesa-dev_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:8d2878bd3c16ea3882cd8437d870c33f43d2b473
  • libgl1-mesa-dri_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:290574355d1d87319842fcc064105feea91647f7
  • libgl1-mesa-glx_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:92d79778d8ef2425abc1098069d1d3eb81cab151
  • libglapi-mesa_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:e54bfab19a1f29595d2e16d5ec16895247c56172
  • libgles2-mesa_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:9147cab2958ffaff130ddbc3cc6b08e6a251b38b
  • libgles2-mesa-dev_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:4f41be8c128cbae7ce41b21a1b9f162467db5ef8
  • libglx-mesa0_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:3de6d3fb1010fce36863a48a3fe9dc32beaa7a7f
  • libosmesa6_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:1533ce7413526966edae8edcbda9e7340bcc8c9b
  • libosmesa6-dev_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:4a499a2333efe87e0bb643ed50b7ac98d17b404b
  • libwayland-egl1-mesa_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:45c6d70264d668c177951c65df2139f10beed2d4
  • libxatracker-dev_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:fad1935d1bb6bb7068f3f905e36dd61c240cb8cf
  • libxatracker2_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:7ba692592e712be1cf785a57908a3e72dbc693aa
  • mesa-common-dev_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:536d0825057f549165d213ff6e2cc1e8b0713db1
  • mesa-opencl-icd_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:68a8ee1263ad2e2d23bd753d61d9fbc54e042cf0
  • mesa-va-drivers_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:8df4768fad766909e52d8b6811e70e4d45e7389d
  • mesa-vdpau-drivers_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:9f2520d8611a3282f8eb468a3f3b08dfaf8eb34f
  • mesa-vulkan-drivers_20.0.8-0ubuntu1~18.04.1+tuxcare.els1_amd64.deb
    sha:b3ed91a384d6c74e8402ebd5b2a7f3d82faee7db
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.