Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE go1.25-openssl Important Security Issues 2026-3151-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE aws-nitro-enclaves-cli Important Issues Advisory 2026-3152-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE nghttp2 Moderate HTTP Request Smuggling Issue 2026-3153-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE python-tornado6 Moderate Credential Leak Vulnerability 2026-3155-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Kernel Important Security Update Vulnerability Fix 2026-3156-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE php7 Moderate Buffer Vulnerability Resolution SUSE-SU-2026-3165-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE libkrun Important Patch 2026-0255-1 for 8 Issues

Calendar White Jul 21, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2

Calendar White Jul 21, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 23 articles for you...
197
Ls Advisories Debianlts Esm H240
Price Tag%201security advisoryimportantmemory access

Debian LTS mesa High Severity Out-of-Bounds Memory Access CVE-2026-40393

A vulnerability has been found in the mesa 3D graphics library, possibly allowing out of bound memory access by craftet input. CVE-2026-40393 An out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4679-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Tobias Frost July 13, 2026 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : mesa Version : 20.3.5-1+deb11u1 $bookworm_VERSION CVE ID : CVE-2026-40393 Debian Bug : A vulnerability has been found in the mesa 3D graphics library, possibly allowing out of bound memory access by craftet input. CVE-2026-40393 An out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca. For Debian 11 bullseye, this problem has been fixed in version 20.3.5-1+deb11u1. For Debian 12 bookworm, this problem has been fixed in version $bookworm_VERSION. We recommend that you upgrade your mesa packages. For the detailed security status of mesa please refer to its security tracker page at: https://security-tracker.debian.org/tracker/mesa Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . A critical security update for mesa addresses out-of-bounds memory access in Debian LTS that could be exploited by crafted input.. Debian LTS, mesa security, out-of-bounds error, memory access, Deblts update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 13, 2026 •Important Debian LTS
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorydenial of serviceUbuntu

Ubuntu 25.10 Mesa Important Denial Of Service USN-8427-1 CVE-2026-40393

Mesa could be made to crash or run programs if it received specially crafted input.. ========================================================================== Ubuntu Security Notice USN-8427-1 June 15, 2026 mesa vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Mesa could be made to crash or run programs if it received specially crafted input. Software Description: - mesa: free implementation of the EGL API Details: It was discovered that Mesa did not properly validate memory allocation sizes in WebGPU under certain circumstances. An attacker could use this issue to cause Mesa to crash, resulting in a denial of service, or possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 libegl-mesa0 25.2.8-0ubuntu0.25.10.2 libgbm1 25.2.8-0ubuntu0.25.10.2 libgl1-mesa-dri 25.2.8-0ubuntu0.25.10.2 libglx-mesa0 25.2.8-0ubuntu0.25.10.2 mesa-drm-shim 25.2.8-0ubuntu0.25.10.2 mesa-libgallium 25.2.8-0ubuntu0.25.10.2 mesa-opencl-icd 25.2.8-0ubuntu0.25.10.2 mesa-teflon-delegate 25.2.8-0ubuntu0.25.10.2 mesa-va-drivers 25.2.8-0ubuntu0.25.10.2 mesa-vdpau-drivers 25.2.8-0ubuntu0.25.10.2 mesa-vulkan-drivers 25.2.8-0ubuntu0.25.10.2 Ubuntu 24.04 LTS libegl-mesa0 25.2.8-0ubuntu0.24.04.2 libgbm1 25.2.8-0ubuntu0.24.04.2 libgl1-mesa-dri 25.2.8-0ubuntu0.24.04.2 libglx-mesa0 25.2.8-0ubuntu0.24.04.2 mesa-drm-shim 25.2.8-0ubuntu0.24.04.2 mesa-libgallium 25.2.8-0ubuntu0.24.04.2 mesa-opencl-icd 25.2.8-0ubuntu0.24.04.2 mesa-teflon-delegate 25.2.8-0ubuntu0.24.04.2 mesa-va-drivers 25.2.8-0ubuntu0.24.04.2 mesa-vdpau-drivers 25.2.8-0ubuntu0.24.04.2 mesa-vulkan-drivers 25.2.8-0ubuntu0.24.04.2 Ubuntu 22.04 LTS libd3dadapter9-mesa 23.2.1-1ubuntu3.1~22.04.4 libegl-mesa0 23.2.1-1ubuntu3.1~22.04.4 libgbm1 23.2.1-1ubuntu3.1~22.04.4 libgl1-mesa-dri 23.2.1-1ubuntu3.1~22.04.4 libglapi-mesa 23.2.1-1ubuntu3.1~22.04.4 libglx-mesa0 23.2.1-1ubuntu3.1~22.04.4 libosmesa6 23.2.1-1ubuntu3.1~22.04.4 libxatracker2 23.2.1-1ubuntu3.1~22.04.4 mesa-drm-shim 23.2.1-1ubuntu3.1~22.04.4 mesa-opencl-icd 23.2.1-1ubuntu3.1~22.04.4 mesa-va-drivers 23.2.1-1ubuntu3.1~22.04.4 mesa-vdpau-drivers 23.2.1-1ubuntu3.1~22.04.4 mesa-vulkan-drivers 23.2.1-1ubuntu3.1~22.04.4 After a standard system update you need to restart your session to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8427-1 CVE-2026-40393 Package Information: https://launchpad.net/ubuntu/+source/mesa/25.2.8-0ubuntu0.25.10.2 https://launchpad.net/ubuntu/+source/mesa/25.2.8-0ubuntu0.24.04.2 https://launchpad.net/ubuntu/+source/mesa/23.2.1-1ubuntu3.1~22.04.4 . Mesa in Ubuntu may crash or execute arbitrary code from crafted input. Update now for protection.. mesa security, Ubuntu advisory, software vulnerability, memory management, application update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 15, 2026 •Important Ubuntu
Banner 2 1028x280 1708121730 1 1771599631
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateSuSE

SUSE 15 SP7 Mesa Moderate Issue Advisory 2026-1845-1 CVE-2026-40393

An update that solves one vulnerability can now be installed.. # Security update for Mesa Announcement ID: SUSE-SU-2026:1845-1 Release Date: 2026-05-13T15:26:53Z Rating: moderate References: * bsc#1261998 Cross-References: * CVE-2026-40393 CVSS scores: * CVE-2026-40393 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-40393 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-40393 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability can now be installed. ## Description: This update for Mesa fixes the following issue: * CVE-2026-40393: out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party (bsc#1261998). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-1845=1 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-1845=1 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-1845=1 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le x86_64) * Mesa-libGL1-debuginfo-24.3.3-150700.93.8.1 * Mesa-libGL1-24.3.3-150700.93.8.1 * libOSMesa8-24.3.3-150700.93.8.1 * Mesa-24.3.3-150700.93.8.1 * libOSMesa-devel-24.3.3-150700.93.8.1 * Mesa-debugsource-24.3.3-150700.93.8.1 * Mesa-libEGL-devel-24.3.3-150700.93.8.1 *Mesa-devel-24.3.3-150700.93.8.1 * libvdpau_virtio_gpu-24.3.3-150700.93.8.1 * libgbm-devel-24.3.3-150700.93.8.1 * Mesa-dri-devel-24.3.3-150700.93.8.1 * libvdpau_r600-24.3.3-150700.93.8.1 * Mesa-libva-24.3.3-150700.93.8.1 * Mesa-libglapi-devel-24.3.3-150700.93.8.1 * Mesa-libGLESv2-devel-24.3.3-150700.93.8.1 * libgbm1-24.3.3-150700.93.8.1 * libOSMesa8-debuginfo-24.3.3-150700.93.8.1 * Mesa-dri-debuginfo-24.3.3-150700.93.8.1 * libxatracker2-debuginfo-1.0.0-150700.93.8.1 * Mesa-libEGL1-debuginfo-24.3.3-150700.93.8.1 * Mesa-dri-24.3.3-150700.93.8.1 * Mesa-libGL-devel-24.3.3-150700.93.8.1 * Mesa-drivers-debugsource-24.3.3-150700.93.8.1 * libxatracker-devel-1.0.0-150700.93.8.1 * Mesa-libGLESv3-devel-24.3.3-150700.93.8.1 * Mesa-libglapi0-debuginfo-24.3.3-150700.93.8.1 * Mesa-libEGL1-24.3.3-150700.93.8.1 * Mesa-KHR-devel-24.3.3-150700.93.8.1 * libgbm1-debuginfo-24.3.3-150700.93.8.1 * Mesa-libGLESv1_CM-devel-24.3.3-150700.93.8.1 * Mesa-gallium-24.3.3-150700.93.8.1 * Mesa-gallium-debuginfo-24.3.3-150700.93.8.1 * libxatracker2-1.0.0-150700.93.8.1 * Mesa-libglapi0-24.3.3-150700.93.8.1 * Basesystem Module 15-SP7 (aarch64 x86_64) * Mesa-vulkan-overlay-debuginfo-24.3.3-150700.93.8.1 * libvulkan_lvp-24.3.3-150700.93.8.1 * Mesa-vulkan-device-select-debuginfo-24.3.3-150700.93.8.1 * libvulkan_radeon-debuginfo-24.3.3-150700.93.8.1 * Mesa-vulkan-overlay-24.3.3-150700.93.8.1 * libvulkan_intel-debuginfo-24.3.3-150700.93.8.1 * Mesa-vulkan-device-select-24.3.3-150700.93.8.1 * libvulkan_intel-24.3.3-150700.93.8.1 * libvulkan_lvp-debuginfo-24.3.3-150700.93.8.1 * libvulkan_radeon-24.3.3-150700.93.8.1 * Basesystem Module 15-SP7 (s390x) * Mesa-libGL1-debuginfo-24.1.7-150700.93.8.1 * Mesa-libglapi0-debuginfo-24.1.7-150700.93.8.1 * Mesa-libGL-devel-24.1.7-150700.93.8.1 * Mesa-dri-24.1.7-150700.93.8.1 * Mesa-dri-debuginfo-24.1.7-150700.93.8.1 *Mesa-libEGL-devel-24.1.7-150700.93.8.1 * libgbm-devel-24.1.7-150700.93.8.1 * Mesa-libGLESv1_CM-devel-24.1.7-150700.93.8.1 * Mesa-libGLESv3-devel-24.1.7-150700.93.8.1 * Mesa-dri-devel-24.1.7-150700.93.8.1 * libOSMesa-devel-24.1.7-150700.93.8.1 * libgbm1-debuginfo-24.1.7-150700.93.8.1 * Mesa-libEGL1-debuginfo-24.1.7-150700.93.8.1 * Mesa-libglapi0-24.1.7-150700.93.8.1 * Mesa-debugsource-24.1.7-150700.93.8.1 * libOSMesa8-debuginfo-24.1.7-150700.93.8.1 * Mesa-libGLESv2-devel-24.1.7-150700.93.8.1 * Mesa-libglapi-devel-24.1.7-150700.93.8.1 * Mesa-24.1.7-150700.93.8.1 * Mesa-libGL1-24.1.7-150700.93.8.1 * Mesa-KHR-devel-24.1.7-150700.93.8.1 * Mesa-devel-24.1.7-150700.93.8.1 * libgbm1-24.1.7-150700.93.8.1 * Mesa-libEGL1-24.1.7-150700.93.8.1 * Mesa-drivers-debugsource-24.1.7-150700.93.8.1 * libOSMesa8-24.1.7-150700.93.8.1 * Basesystem Module 15-SP7 (x86_64) * Mesa-libGL1-32bit-24.3.3-150700.93.8.1 * Mesa-gallium-32bit-24.3.3-150700.93.8.1 * Mesa-libva-32bit-24.3.3-150700.93.8.1 * Mesa-gallium-32bit-debuginfo-24.3.3-150700.93.8.1 * Mesa-libEGL1-32bit-24.3.3-150700.93.8.1 * Mesa-libglapi0-32bit-debuginfo-24.3.3-150700.93.8.1 * libgbm1-32bit-24.3.3-150700.93.8.1 * Mesa-libEGL1-32bit-debuginfo-24.3.3-150700.93.8.1 * Mesa-dri-32bit-24.3.3-150700.93.8.1 * Mesa-dri-32bit-debuginfo-24.3.3-150700.93.8.1 * Mesa-libglapi0-32bit-24.3.3-150700.93.8.1 * Mesa-libGL1-32bit-debuginfo-24.3.3-150700.93.8.1 * libgbm1-32bit-debuginfo-24.3.3-150700.93.8.1 * Mesa-libd3d-24.3.3-150700.93.8.1 * libvdpau_radeonsi-24.3.3-150700.93.8.1 * Mesa-32bit-24.3.3-150700.93.8.1 * Mesa-libd3d-devel-24.3.3-150700.93.8.1 * Mesa-libd3d-debuginfo-24.3.3-150700.93.8.1 * SUSE Package Hub 15 15-SP7 (x86_64) * libOSMesa8-32bit-24.3.3-150700.93.8.1 * libvulkan_intel-32bit-debuginfo-24.3.3-150700.93.8.1 * libvulkan_intel-32bit-24.3.3-150700.93.8.1 * libvulkan_radeon-32bit-24.3.3-150700.93.8.1 *Mesa-vulkan-device-select-32bit-debuginfo-24.3.3-150700.93.8.1 * libvulkan_radeon-32bit-debuginfo-24.3.3-150700.93.8.1 * Mesa-vulkan-device-select-32bit-24.3.3-150700.93.8.1 * libOSMesa8-32bit-debuginfo-24.3.3-150700.93.8.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * Mesa-dri-nouveau-24.3.3-150700.93.8.1 * libvdpau_nouveau-24.3.3-150700.93.8.1 * Mesa-drivers-debugsource-24.3.3-150700.93.8.1 ## References: * https://www.suse.com/security/cve/CVE-2026-40393.html * https://bugzilla.suse.com/show_bug.cgi?id=1261998 . An urgent update for Mesa in SUSE addresses a memory access issue, improving system security significantly.. SUSE Update Mesa Memory Security CVE-2026-40393. . LinuxSecurity.com Team

Calendar%202 May 13, 2026 SuSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderatememory access

openSUSE 15.5 Mesa Moderate Memory Access Issue SUSE-SU-2026-1835-1

An update that solves one vulnerability can now be installed.. # Security update for Mesa Announcement ID: SUSE-SU-2026:1835-1 Release Date: 2026-05-12T16:18:06Z Rating: moderate References: * bsc#1261998 Cross-References: * CVE-2026-40393 CVSS scores: * CVE-2026-40393 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-40393 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-40393 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for Mesa fixes the following issue: * CVE-2026-40393: out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party (bsc#1261998). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-1835=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-1835=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-1835=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * Mesa-drivers-debugsource-22.3.5-150500.77.8.1 * libOSMesa-devel-22.3.5-150500.77.8.1 * Mesa-debugsource-22.3.5-150500.77.8.1 * Mesa-dri-debuginfo-22.3.5-150500.77.8.1 * Mesa-libEGL1-22.3.5-150500.77.8.1 * Mesa-libEGL-devel-22.3.5-150500.77.8.1 * libOSMesa8-debuginfo-22.3.5-150500.77.8.1 * libOSMesa8-22.3.5-150500.77.8.1 * libgbm1-22.3.5-150500.77.8.1 *Mesa-dri-22.3.5-150500.77.8.1 * libgbm-devel-22.3.5-150500.77.8.1 * Mesa-libGL-devel-22.3.5-150500.77.8.1 * Mesa-devel-22.3.5-150500.77.8.1 * Mesa-dri-devel-22.3.5-150500.77.8.1 * libgbm1-debuginfo-22.3.5-150500.77.8.1 * Mesa-libGLESv3-devel-22.3.5-150500.77.8.1 * Mesa-KHR-devel-22.3.5-150500.77.8.1 * Mesa-libGLESv1_CM-devel-22.3.5-150500.77.8.1 * Mesa-libGL1-22.3.5-150500.77.8.1 * Mesa-libglapi-devel-22.3.5-150500.77.8.1 * Mesa-libglapi0-22.3.5-150500.77.8.1 * Mesa-libGLESv2-devel-22.3.5-150500.77.8.1 * Mesa-libglapi0-debuginfo-22.3.5-150500.77.8.1 * Mesa-libEGL1-debuginfo-22.3.5-150500.77.8.1 * Mesa-libGL1-debuginfo-22.3.5-150500.77.8.1 * Mesa-22.3.5-150500.77.8.1 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64 i586) * libxatracker-devel-1.0.0-150500.77.8.1 * Mesa-gallium-22.3.5-150500.77.8.1 * Mesa-libOpenCL-22.3.5-150500.77.8.1 * libxatracker2-1.0.0-150500.77.8.1 * libvdpau_nouveau-22.3.5-150500.77.8.1 * libvdpau_nouveau-debuginfo-22.3.5-150500.77.8.1 * libvdpau_virtio_gpu-debuginfo-22.3.5-150500.77.8.1 * libvdpau_radeonsi-22.3.5-150500.77.8.1 * Mesa-gallium-debuginfo-22.3.5-150500.77.8.1 * libvdpau_r600-debuginfo-22.3.5-150500.77.8.1 * Mesa-libOpenCL-debuginfo-22.3.5-150500.77.8.1 * libvdpau_virtio_gpu-22.3.5-150500.77.8.1 * Mesa-dri-nouveau-debuginfo-22.3.5-150500.77.8.1 * libvdpau_r300-debuginfo-22.3.5-150500.77.8.1 * libxatracker2-debuginfo-1.0.0-150500.77.8.1 * libvdpau_r600-22.3.5-150500.77.8.1 * libvdpau_radeonsi-debuginfo-22.3.5-150500.77.8.1 * Mesa-dri-nouveau-22.3.5-150500.77.8.1 * Mesa-libva-22.3.5-150500.77.8.1 * libvdpau_r300-22.3.5-150500.77.8.1 * Mesa-libva-debuginfo-22.3.5-150500.77.8.1 * openSUSE Leap 15.5 (aarch64 x86_64 i586) * Mesa-libd3d-22.3.5-150500.77.8.1 * Mesa-libd3d-devel-22.3.5-150500.77.8.1 * libvulkan_radeon-debuginfo-22.3.5-150500.77.8.1 * Mesa-vulkan-device-select-22.3.5-150500.77.8.1 *Mesa-vulkan-overlay-debuginfo-22.3.5-150500.77.8.1 * Mesa-vulkan-device-select-debuginfo-22.3.5-150500.77.8.1 * libvulkan_radeon-22.3.5-150500.77.8.1 * Mesa-vulkan-overlay-22.3.5-150500.77.8.1 * libvulkan_lvp-22.3.5-150500.77.8.1 * libvulkan_lvp-debuginfo-22.3.5-150500.77.8.1 * Mesa-libd3d-debuginfo-22.3.5-150500.77.8.1 * openSUSE Leap 15.5 (x86_64) * Mesa-libglapi-devel-32bit-22.3.5-150500.77.8.1 * Mesa-vulkan-device-select-32bit-22.3.5-150500.77.8.1 * Mesa-libEGL1-32bit-22.3.5-150500.77.8.1 * Mesa-gallium-32bit-22.3.5-150500.77.8.1 * libvulkan_intel-32bit-22.3.5-150500.77.8.1 * libvdpau_virtio_gpu-32bit-debuginfo-22.3.5-150500.77.8.1 * libvulkan_radeon-32bit-debuginfo-22.3.5-150500.77.8.1 * libOSMesa8-32bit-22.3.5-150500.77.8.1 * Mesa-libd3d-32bit-debuginfo-22.3.5-150500.77.8.1 * Mesa-dri-32bit-22.3.5-150500.77.8.1 * Mesa-gallium-32bit-debuginfo-22.3.5-150500.77.8.1 * Mesa-libGL-devel-32bit-22.3.5-150500.77.8.1 * libvdpau_virtio_gpu-32bit-22.3.5-150500.77.8.1 * libgbm1-32bit-debuginfo-22.3.5-150500.77.8.1 * Mesa-libd3d-32bit-22.3.5-150500.77.8.1 * Mesa-libglapi0-32bit-debuginfo-22.3.5-150500.77.8.1 * libvdpau_r300-32bit-22.3.5-150500.77.8.1 * libgbm1-32bit-22.3.5-150500.77.8.1 * Mesa-libd3d-devel-32bit-22.3.5-150500.77.8.1 * libvdpau_radeonsi-32bit-debuginfo-22.3.5-150500.77.8.1 * libvdpau_nouveau-32bit-debuginfo-22.3.5-150500.77.8.1 * libvulkan_radeon-32bit-22.3.5-150500.77.8.1 * Mesa-libGL1-32bit-22.3.5-150500.77.8.1 * Mesa-dri-nouveau-32bit-debuginfo-22.3.5-150500.77.8.1 * Mesa-dri-nouveau-32bit-22.3.5-150500.77.8.1 * libOSMesa-devel-32bit-22.3.5-150500.77.8.1 * Mesa-32bit-22.3.5-150500.77.8.1 * Mesa-dri-32bit-debuginfo-22.3.5-150500.77.8.1 * libvdpau_radeonsi-32bit-22.3.5-150500.77.8.1 * libvdpau_r300-32bit-debuginfo-22.3.5-150500.77.8.1 * Mesa-libEGL1-32bit-debuginfo-22.3.5-150500.77.8.1 * Mesa-libGLESv2-devel-32bit-22.3.5-150500.77.8.1 *libgbm-devel-32bit-22.3.5-150500.77.8.1 * libvulkan_intel-32bit-debuginfo-22.3.5-150500.77.8.1 * Mesa-libGL1-32bit-debuginfo-22.3.5-150500.77.8.1 * Mesa-vulkan-overlay-32bit-22.3.5-150500.77.8.1 * Mesa-libGLESv1_CM-devel-32bit-22.3.5-150500.77.8.1 * Mesa-libglapi0-32bit-22.3.5-150500.77.8.1 * libvdpau_r600-32bit-22.3.5-150500.77.8.1 * libvdpau_nouveau-32bit-22.3.5-150500.77.8.1 * Mesa-libEGL-devel-32bit-22.3.5-150500.77.8.1 * libvdpau_r600-32bit-debuginfo-22.3.5-150500.77.8.1 * Mesa-vulkan-device-select-32bit-debuginfo-22.3.5-150500.77.8.1 * Mesa-vulkan-overlay-32bit-debuginfo-22.3.5-150500.77.8.1 * libOSMesa8-32bit-debuginfo-22.3.5-150500.77.8.1 * openSUSE Leap 15.5 (x86_64 i586) * libvulkan_intel-debuginfo-22.3.5-150500.77.8.1 * libvulkan_intel-22.3.5-150500.77.8.1 * openSUSE Leap 15.5 (aarch64_ilp32) * Mesa-libglapi0-64bit-debuginfo-22.3.5-150500.77.8.1 * Mesa-dri-vc4-64bit-debuginfo-22.3.5-150500.77.8.1 * libgbm-devel-64bit-22.3.5-150500.77.8.1 * Mesa-libd3d-64bit-22.3.5-150500.77.8.1 * libgbm1-64bit-22.3.5-150500.77.8.1 * Mesa-vulkan-overlay-64bit-22.3.5-150500.77.8.1 * libvdpau_nouveau-64bit-debuginfo-22.3.5-150500.77.8.1 * libvdpau_r600-64bit-debuginfo-22.3.5-150500.77.8.1 * Mesa-dri-nouveau-64bit-debuginfo-22.3.5-150500.77.8.1 * libvdpau_radeonsi-64bit-debuginfo-22.3.5-150500.77.8.1 * Mesa-vulkan-device-select-64bit-debuginfo-22.3.5-150500.77.8.1 * libvdpau_radeonsi-64bit-22.3.5-150500.77.8.1 * Mesa-dri-64bit-22.3.5-150500.77.8.1 * Mesa-libd3d-devel-64bit-22.3.5-150500.77.8.1 * Mesa-libEGL-devel-64bit-22.3.5-150500.77.8.1 * libvulkan_radeon-64bit-debuginfo-22.3.5-150500.77.8.1 * Mesa-vulkan-overlay-64bit-debuginfo-22.3.5-150500.77.8.1 * libvdpau_nouveau-64bit-22.3.5-150500.77.8.1 * Mesa-libGL1-64bit-22.3.5-150500.77.8.1 * Mesa-libGLESv2-devel-64bit-22.3.5-150500.77.8.1 * libOSMesa8-64bit-22.3.5-150500.77.8.1 * Mesa-64bit-22.3.5-150500.77.8.1 *Mesa-dri-64bit-debuginfo-22.3.5-150500.77.8.1 * libvdpau_r300-64bit-debuginfo-22.3.5-150500.77.8.1 * Mesa-libd3d-64bit-debuginfo-22.3.5-150500.77.8.1 * Mesa-gallium-64bit-debuginfo-22.3.5-150500.77.8.1 * libvdpau_r600-64bit-22.3.5-150500.77.8.1 * Mesa-libglapi-devel-64bit-22.3.5-150500.77.8.1 * Mesa-gallium-64bit-22.3.5-150500.77.8.1 * libOSMesa8-64bit-debuginfo-22.3.5-150500.77.8.1 * Mesa-libglapi0-64bit-22.3.5-150500.77.8.1 * Mesa-dri-vc4-64bit-22.3.5-150500.77.8.1 * Mesa-libEGL1-64bit-debuginfo-22.3.5-150500.77.8.1 * libvulkan_radeon-64bit-22.3.5-150500.77.8.1 * libgbm1-64bit-debuginfo-22.3.5-150500.77.8.1 * Mesa-libGL1-64bit-debuginfo-22.3.5-150500.77.8.1 * Mesa-libGLESv1_CM-devel-64bit-22.3.5-150500.77.8.1 * Mesa-dri-nouveau-64bit-22.3.5-150500.77.8.1 * libvdpau_virtio_gpu-64bit-debuginfo-22.3.5-150500.77.8.1 * Mesa-libEGL1-64bit-22.3.5-150500.77.8.1 * libOSMesa-devel-64bit-22.3.5-150500.77.8.1 * Mesa-libGL-devel-64bit-22.3.5-150500.77.8.1 * libvdpau_r300-64bit-22.3.5-150500.77.8.1 * Mesa-vulkan-device-select-64bit-22.3.5-150500.77.8.1 * libvdpau_virtio_gpu-64bit-22.3.5-150500.77.8.1 * openSUSE Leap 15.5 (aarch64) * libvulkan_freedreno-debuginfo-22.3.5-150500.77.8.1 * Mesa-dri-vc4-22.3.5-150500.77.8.1 * libvulkan_broadcom-debuginfo-22.3.5-150500.77.8.1 * libvulkan_freedreno-22.3.5-150500.77.8.1 * libvulkan_broadcom-22.3.5-150500.77.8.1 * Mesa-dri-vc4-debuginfo-22.3.5-150500.77.8.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * Mesa-drivers-debugsource-22.3.5-150500.77.8.1 * Mesa-libglapi0-22.3.5-150500.77.8.1 * libgbm1-debuginfo-22.3.5-150500.77.8.1 * Mesa-libglapi0-debuginfo-22.3.5-150500.77.8.1 * Mesa-debugsource-22.3.5-150500.77.8.1 * Mesa-dri-debuginfo-22.3.5-150500.77.8.1 * libgbm1-22.3.5-150500.77.8.1 * Mesa-dri-22.3.5-150500.77.8.1 * Mesa-libEGL1-22.3.5-150500.77.8.1 * Mesa-libGL1-22.3.5-150500.77.8.1 *Mesa-libEGL1-debuginfo-22.3.5-150500.77.8.1 * Mesa-libGL1-debuginfo-22.3.5-150500.77.8.1 * Mesa-22.3.5-150500.77.8.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le x86_64) * Mesa-gallium-debuginfo-22.3.5-150500.77.8.1 * Mesa-gallium-22.3.5-150500.77.8.1 * Basesystem Module 15-SP7 (aarch64 ppc64le x86_64) * Mesa-drivers-debugsource-22.3.5-150500.77.8.1 * libvdpau_r300-debuginfo-22.3.5-150500.77.8.1 * libvdpau_r300-22.3.5-150500.77.8.1 ## References: * https://www.suse.com/security/cve/CVE-2026-40393.html * https://bugzilla.suse.com/show_bug.cgi?id=1261998 . Update for Mesa on openSUSE fixes out-of-bounds memory access risk, rated moderate severity.. Mesa update, SUSE security, memory access risk. . LinuxSecurity.com Team

Calendar%202 May 13, 2026 SuSE
Banner 2 1028x280 1708121730 1 1771599631
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderatememory access

openSUSE 15.4 Mesa Moderate Memory Access Issue SUSE-SU-2026-1839-1

An update that solves one vulnerability can now be installed.. # Security update for Mesa Announcement ID: SUSE-SU-2026:1839-1 Release Date: 2026-05-13T09:13:57Z Rating: moderate References: * bsc#1261998 Cross-References: * CVE-2026-40393 CVSS scores: * CVE-2026-40393 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-40393 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-40393 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for Mesa fixes the following issue: * CVE-2026-40393: out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party (bsc#1261998). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-1839=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-1839=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-1839=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-1839=1 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-1839=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypperin -t patch SUSE-SLE-Micro-5.3-2026-1839=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-1839=1 ## Package List: * openSUSE Leap 15.4 (aarch64 x86_64 i586) * libvulkan_radeon-21.2.4-150400.68.18.1 * Mesa-libd3d-21.2.4-150400.68.18.1 * Mesa-vulkan-device-select-21.2.4-150400.68.18.1 * Mesa-vulkan-overlay-21.2.4-150400.68.18.1 * libvulkan_radeon-debuginfo-21.2.4-150400.68.18.1 * libvulkan_lvp-21.2.4-150400.68.18.1 * libvulkan_lvp-debuginfo-21.2.4-150400.68.18.1 * Mesa-libd3d-devel-21.2.4-150400.68.18.1 * Mesa-libd3d-debuginfo-21.2.4-150400.68.18.1 * Mesa-vulkan-device-select-debuginfo-21.2.4-150400.68.18.1 * Mesa-vulkan-overlay-debuginfo-21.2.4-150400.68.18.1 * Mesa-libVulkan-devel-21.2.4-150400.68.18.1 * openSUSE Leap 15.4 (aarch64 ppc64le x86_64 i586) * libvdpau_nouveau-debuginfo-21.2.4-150400.68.18.1 * libvdpau_r300-debuginfo-21.2.4-150400.68.18.1 * Mesa-libva-debuginfo-21.2.4-150400.68.18.1 * libXvMC_nouveau-21.2.4-150400.68.18.1 * Mesa-libOpenCL-21.2.4-150400.68.18.1 * libvdpau_radeonsi-21.2.4-150400.68.18.1 * Mesa-libva-21.2.4-150400.68.18.1 * libXvMC_r600-21.2.4-150400.68.18.1 * Mesa-libOpenCL-debuginfo-21.2.4-150400.68.18.1 * Mesa-dri-nouveau-21.2.4-150400.68.18.1 * libxatracker2-1.0.0-150400.68.18.1 * libvdpau_radeonsi-debuginfo-21.2.4-150400.68.18.1 * libXvMC_nouveau-debuginfo-21.2.4-150400.68.18.1 * libxatracker2-debuginfo-1.0.0-150400.68.18.1 * libvdpau_r300-21.2.4-150400.68.18.1 * libvdpau_r600-debuginfo-21.2.4-150400.68.18.1 * Mesa-dri-nouveau-debuginfo-21.2.4-150400.68.18.1 * libvdpau_nouveau-21.2.4-150400.68.18.1 * libXvMC_r600-debuginfo-21.2.4-150400.68.18.1 * Mesa-gallium-debuginfo-21.2.4-150400.68.18.1 * Mesa-gallium-21.2.4-150400.68.18.1 * libvdpau_r600-21.2.4-150400.68.18.1 * libxatracker-devel-1.0.0-150400.68.18.1 * openSUSE Leap 15.4 (x86_64) * Mesa-vulkan-overlay-32bit-21.2.4-150400.68.18.1 *libOSMesa-devel-32bit-21.2.4-150400.68.18.1 * libvdpau_r600-32bit-21.2.4-150400.68.18.1 * Mesa-gallium-32bit-21.2.4-150400.68.18.1 * Mesa-libGLESv2-devel-32bit-21.2.4-150400.68.18.1 * Mesa-libGL1-32bit-debuginfo-21.2.4-150400.68.18.1 * libvulkan_intel-32bit-21.2.4-150400.68.18.1 * libXvMC_r600-32bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libd3d-32bit-21.2.4-150400.68.18.1 * libvdpau_r300-32bit-21.2.4-150400.68.18.1 * Mesa-dri-32bit-debuginfo-21.2.4-150400.68.18.1 * libvulkan_radeon-32bit-21.2.4-150400.68.18.1 * Mesa-gallium-32bit-debuginfo-21.2.4-150400.68.18.1 * libvdpau_r600-32bit-debuginfo-21.2.4-150400.68.18.1 * libXvMC_nouveau-32bit-debuginfo-21.2.4-150400.68.18.1 * libvdpau_r300-32bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-vulkan-device-select-32bit-debuginfo-21.2.4-150400.68.18.1 * libgbm1-32bit-21.2.4-150400.68.18.1 * Mesa-libd3d-devel-32bit-21.2.4-150400.68.18.1 * libvdpau_nouveau-32bit-21.2.4-150400.68.18.1 * Mesa-libEGL1-32bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libglapi0-32bit-21.2.4-150400.68.18.1 * libOSMesa8-32bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libglapi0-32bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libGL1-32bit-21.2.4-150400.68.18.1 * libXvMC_nouveau-32bit-21.2.4-150400.68.18.1 * libvdpau_radeonsi-32bit-21.2.4-150400.68.18.1 * libOSMesa8-32bit-21.2.4-150400.68.18.1 * libXvMC_r600-32bit-21.2.4-150400.68.18.1 * Mesa-vulkan-device-select-32bit-21.2.4-150400.68.18.1 * libvulkan_intel-32bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libglapi-devel-32bit-21.2.4-150400.68.18.1 * Mesa-dri-32bit-21.2.4-150400.68.18.1 * Mesa-vulkan-overlay-32bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libGLESv1_CM-devel-32bit-21.2.4-150400.68.18.1 * libgbm1-32bit-debuginfo-21.2.4-150400.68.18.1 * libgbm-devel-32bit-21.2.4-150400.68.18.1 * Mesa-libEGL1-32bit-21.2.4-150400.68.18.1 * Mesa-32bit-21.2.4-150400.68.18.1 *libvdpau_radeonsi-32bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libEGL-devel-32bit-21.2.4-150400.68.18.1 * Mesa-libd3d-32bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libGL-devel-32bit-21.2.4-150400.68.18.1 * Mesa-dri-nouveau-32bit-debuginfo-21.2.4-150400.68.18.1 * libvulkan_radeon-32bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-dri-nouveau-32bit-21.2.4-150400.68.18.1 * libvdpau_nouveau-32bit-debuginfo-21.2.4-150400.68.18.1 * openSUSE Leap 15.4 (x86_64 i586) * libvulkan_intel-debuginfo-21.2.4-150400.68.18.1 * libvulkan_intel-21.2.4-150400.68.18.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * Mesa-libGLESv1_CM-devel-21.2.4-150400.68.18.1 * Mesa-libGL-devel-21.2.4-150400.68.18.1 * Mesa-libglapi0-debuginfo-21.2.4-150400.68.18.1 * libOSMesa8-21.2.4-150400.68.18.1 * Mesa-dri-21.2.4-150400.68.18.1 * Mesa-debugsource-21.2.4-150400.68.18.1 * Mesa-dri-debuginfo-21.2.4-150400.68.18.1 * Mesa-21.2.4-150400.68.18.1 * Mesa-libGLESv2-devel-21.2.4-150400.68.18.1 * Mesa-devel-21.2.4-150400.68.18.1 * libOSMesa-devel-21.2.4-150400.68.18.1 * Mesa-libEGL1-debuginfo-21.2.4-150400.68.18.1 * Mesa-libglapi0-21.2.4-150400.68.18.1 * Mesa-libglapi-devel-21.2.4-150400.68.18.1 * Mesa-libEGL1-21.2.4-150400.68.18.1 * Mesa-dri-devel-21.2.4-150400.68.18.1 * libOSMesa8-debuginfo-21.2.4-150400.68.18.1 * Mesa-libGL1-debuginfo-21.2.4-150400.68.18.1 * libgbm1-debuginfo-21.2.4-150400.68.18.1 * Mesa-libGLESv3-devel-21.2.4-150400.68.18.1 * Mesa-libEGL-devel-21.2.4-150400.68.18.1 * libgbm-devel-21.2.4-150400.68.18.1 * Mesa-libGL1-21.2.4-150400.68.18.1 * libgbm1-21.2.4-150400.68.18.1 * Mesa-drivers-debugsource-21.2.4-150400.68.18.1 * Mesa-KHR-devel-21.2.4-150400.68.18.1 * openSUSE Leap 15.4 (aarch64_ilp32) * Mesa-libd3d-64bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-dri-vc4-64bit-21.2.4-150400.68.18.1 * Mesa-vulkan-device-select-64bit-21.2.4-150400.68.18.1 *Mesa-vulkan-device-select-64bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libGL1-64bit-21.2.4-150400.68.18.1 * Mesa-libglapi-devel-64bit-21.2.4-150400.68.18.1 * libOSMesa8-64bit-21.2.4-150400.68.18.1 * libvdpau_nouveau-64bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-gallium-64bit-debuginfo-21.2.4-150400.68.18.1 * libXvMC_r600-64bit-21.2.4-150400.68.18.1 * Mesa-dri-nouveau-64bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-dri-vc4-64bit-debuginfo-21.2.4-150400.68.18.1 * libgbm1-64bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libEGL1-64bit-21.2.4-150400.68.18.1 * Mesa-dri-nouveau-64bit-21.2.4-150400.68.18.1 * libvdpau_r600-64bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libGL-devel-64bit-21.2.4-150400.68.18.1 * libvdpau_r300-64bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libGL1-64bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libd3d-devel-64bit-21.2.4-150400.68.18.1 * libvdpau_nouveau-64bit-21.2.4-150400.68.18.1 * Mesa-libGLESv2-devel-64bit-21.2.4-150400.68.18.1 * libvdpau_r600-64bit-21.2.4-150400.68.18.1 * libvdpau_radeonsi-64bit-21.2.4-150400.68.18.1 * Mesa-gallium-64bit-21.2.4-150400.68.18.1 * Mesa-64bit-21.2.4-150400.68.18.1 * Mesa-libEGL-devel-64bit-21.2.4-150400.68.18.1 * Mesa-libGLESv1_CM-devel-64bit-21.2.4-150400.68.18.1 * Mesa-libglapi0-64bit-21.2.4-150400.68.18.1 * libgbm-devel-64bit-21.2.4-150400.68.18.1 * libXvMC_r600-64bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-dri-64bit-debuginfo-21.2.4-150400.68.18.1 * libOSMesa-devel-64bit-21.2.4-150400.68.18.1 * Mesa-vulkan-overlay-64bit-21.2.4-150400.68.18.1 * Mesa-dri-64bit-21.2.4-150400.68.18.1 * Mesa-libglapi0-64bit-debuginfo-21.2.4-150400.68.18.1 * libvdpau_r300-64bit-21.2.4-150400.68.18.1 * libvdpau_radeonsi-64bit-debuginfo-21.2.4-150400.68.18.1 * libvulkan_radeon-64bit-debuginfo-21.2.4-150400.68.18.1 * libOSMesa8-64bit-debuginfo-21.2.4-150400.68.18.1 * libXvMC_nouveau-64bit-debuginfo-21.2.4-150400.68.18.1 *Mesa-vulkan-overlay-64bit-debuginfo-21.2.4-150400.68.18.1 * libvulkan_radeon-64bit-21.2.4-150400.68.18.1 * libgbm1-64bit-21.2.4-150400.68.18.1 * libXvMC_nouveau-64bit-21.2.4-150400.68.18.1 * Mesa-libd3d-64bit-21.2.4-150400.68.18.1 * Mesa-libEGL1-64bit-debuginfo-21.2.4-150400.68.18.1 * openSUSE Leap 15.4 (aarch64) * Mesa-dri-vc4-21.2.4-150400.68.18.1 * Mesa-dri-vc4-debuginfo-21.2.4-150400.68.18.1 * libvulkan_freedreno-21.2.4-150400.68.18.1 * libvulkan_broadcom-21.2.4-150400.68.18.1 * libvulkan_broadcom-debuginfo-21.2.4-150400.68.18.1 * libvulkan_freedreno-debuginfo-21.2.4-150400.68.18.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libgbm1-21.2.4-150400.68.18.1 * libgbm1-debuginfo-21.2.4-150400.68.18.1 * Mesa-debugsource-21.2.4-150400.68.18.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libgbm1-21.2.4-150400.68.18.1 * libgbm1-debuginfo-21.2.4-150400.68.18.1 * Mesa-debugsource-21.2.4-150400.68.18.1 * Basesystem Module 15-SP7 (x86_64) * Mesa-libVulkan-devel-21.2.4-150400.68.18.1 * Mesa-drivers-debugsource-21.2.4-150400.68.18.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * libXvMC_nouveau-debuginfo-21.2.4-150400.68.18.1 * libXvMC_nouveau-21.2.4-150400.68.18.1 * Mesa-drivers-debugsource-21.2.4-150400.68.18.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libgbm1-21.2.4-150400.68.18.1 * libgbm1-debuginfo-21.2.4-150400.68.18.1 * Mesa-debugsource-21.2.4-150400.68.18.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libgbm1-21.2.4-150400.68.18.1 * libgbm1-debuginfo-21.2.4-150400.68.18.1 * Mesa-debugsource-21.2.4-150400.68.18.1 ## References: * https://www.suse.com/security/cve/CVE-2026-40393.html * https://bugzilla.suse.com/show_bug.cgi?id=1261998 . Update for Mesa addresses a moderate issue with out-of-bounds memory access in WebGPU, critical for secure operations.. Mesa security advisory,openSUSE update, memory access vulnerability. . LinuxSecurity.com Team

Calendar%202 May 13, 2026 OpenSUSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateSuSE

SUSE Mesa Moderate Out-of-Bounds Memory Access Vuln 2026-1839-1

An update that solves one vulnerability can now be installed.. # Security update for Mesa Announcement ID: SUSE-SU-2026:1839-1 Release Date: 2026-05-13T09:13:57Z Rating: moderate References: * bsc#1261998 Cross-References: * CVE-2026-40393 CVSS scores: * CVE-2026-40393 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-40393 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-40393 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for Mesa fixes the following issue: * CVE-2026-40393: out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party (bsc#1261998). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-1839=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-1839=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-1839=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-1839=1 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-1839=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypperin -t patch SUSE-SLE-Micro-5.3-2026-1839=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-1839=1 ## Package List: * openSUSE Leap 15.4 (aarch64 x86_64 i586) * libvulkan_radeon-21.2.4-150400.68.18.1 * Mesa-libd3d-21.2.4-150400.68.18.1 * Mesa-vulkan-device-select-21.2.4-150400.68.18.1 * Mesa-vulkan-overlay-21.2.4-150400.68.18.1 * libvulkan_radeon-debuginfo-21.2.4-150400.68.18.1 * libvulkan_lvp-21.2.4-150400.68.18.1 * libvulkan_lvp-debuginfo-21.2.4-150400.68.18.1 * Mesa-libd3d-devel-21.2.4-150400.68.18.1 * Mesa-libd3d-debuginfo-21.2.4-150400.68.18.1 * Mesa-vulkan-device-select-debuginfo-21.2.4-150400.68.18.1 * Mesa-vulkan-overlay-debuginfo-21.2.4-150400.68.18.1 * Mesa-libVulkan-devel-21.2.4-150400.68.18.1 * openSUSE Leap 15.4 (aarch64 ppc64le x86_64 i586) * libvdpau_nouveau-debuginfo-21.2.4-150400.68.18.1 * libvdpau_r300-debuginfo-21.2.4-150400.68.18.1 * Mesa-libva-debuginfo-21.2.4-150400.68.18.1 * libXvMC_nouveau-21.2.4-150400.68.18.1 * Mesa-libOpenCL-21.2.4-150400.68.18.1 * libvdpau_radeonsi-21.2.4-150400.68.18.1 * Mesa-libva-21.2.4-150400.68.18.1 * libXvMC_r600-21.2.4-150400.68.18.1 * Mesa-libOpenCL-debuginfo-21.2.4-150400.68.18.1 * Mesa-dri-nouveau-21.2.4-150400.68.18.1 * libxatracker2-1.0.0-150400.68.18.1 * libvdpau_radeonsi-debuginfo-21.2.4-150400.68.18.1 * libXvMC_nouveau-debuginfo-21.2.4-150400.68.18.1 * libxatracker2-debuginfo-1.0.0-150400.68.18.1 * libvdpau_r300-21.2.4-150400.68.18.1 * libvdpau_r600-debuginfo-21.2.4-150400.68.18.1 * Mesa-dri-nouveau-debuginfo-21.2.4-150400.68.18.1 * libvdpau_nouveau-21.2.4-150400.68.18.1 * libXvMC_r600-debuginfo-21.2.4-150400.68.18.1 * Mesa-gallium-debuginfo-21.2.4-150400.68.18.1 * Mesa-gallium-21.2.4-150400.68.18.1 * libvdpau_r600-21.2.4-150400.68.18.1 * libxatracker-devel-1.0.0-150400.68.18.1 * openSUSE Leap 15.4 (x86_64) * Mesa-vulkan-overlay-32bit-21.2.4-150400.68.18.1 *libOSMesa-devel-32bit-21.2.4-150400.68.18.1 * libvdpau_r600-32bit-21.2.4-150400.68.18.1 * Mesa-gallium-32bit-21.2.4-150400.68.18.1 * Mesa-libGLESv2-devel-32bit-21.2.4-150400.68.18.1 * Mesa-libGL1-32bit-debuginfo-21.2.4-150400.68.18.1 * libvulkan_intel-32bit-21.2.4-150400.68.18.1 * libXvMC_r600-32bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libd3d-32bit-21.2.4-150400.68.18.1 * libvdpau_r300-32bit-21.2.4-150400.68.18.1 * Mesa-dri-32bit-debuginfo-21.2.4-150400.68.18.1 * libvulkan_radeon-32bit-21.2.4-150400.68.18.1 * Mesa-gallium-32bit-debuginfo-21.2.4-150400.68.18.1 * libvdpau_r600-32bit-debuginfo-21.2.4-150400.68.18.1 * libXvMC_nouveau-32bit-debuginfo-21.2.4-150400.68.18.1 * libvdpau_r300-32bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-vulkan-device-select-32bit-debuginfo-21.2.4-150400.68.18.1 * libgbm1-32bit-21.2.4-150400.68.18.1 * Mesa-libd3d-devel-32bit-21.2.4-150400.68.18.1 * libvdpau_nouveau-32bit-21.2.4-150400.68.18.1 * Mesa-libEGL1-32bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libglapi0-32bit-21.2.4-150400.68.18.1 * libOSMesa8-32bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libglapi0-32bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libGL1-32bit-21.2.4-150400.68.18.1 * libXvMC_nouveau-32bit-21.2.4-150400.68.18.1 * libvdpau_radeonsi-32bit-21.2.4-150400.68.18.1 * libOSMesa8-32bit-21.2.4-150400.68.18.1 * libXvMC_r600-32bit-21.2.4-150400.68.18.1 * Mesa-vulkan-device-select-32bit-21.2.4-150400.68.18.1 * libvulkan_intel-32bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libglapi-devel-32bit-21.2.4-150400.68.18.1 * Mesa-dri-32bit-21.2.4-150400.68.18.1 * Mesa-vulkan-overlay-32bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libGLESv1_CM-devel-32bit-21.2.4-150400.68.18.1 * libgbm1-32bit-debuginfo-21.2.4-150400.68.18.1 * libgbm-devel-32bit-21.2.4-150400.68.18.1 * Mesa-libEGL1-32bit-21.2.4-150400.68.18.1 * Mesa-32bit-21.2.4-150400.68.18.1 *libvdpau_radeonsi-32bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libEGL-devel-32bit-21.2.4-150400.68.18.1 * Mesa-libd3d-32bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libGL-devel-32bit-21.2.4-150400.68.18.1 * Mesa-dri-nouveau-32bit-debuginfo-21.2.4-150400.68.18.1 * libvulkan_radeon-32bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-dri-nouveau-32bit-21.2.4-150400.68.18.1 * libvdpau_nouveau-32bit-debuginfo-21.2.4-150400.68.18.1 * openSUSE Leap 15.4 (x86_64 i586) * libvulkan_intel-debuginfo-21.2.4-150400.68.18.1 * libvulkan_intel-21.2.4-150400.68.18.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * Mesa-libGLESv1_CM-devel-21.2.4-150400.68.18.1 * Mesa-libGL-devel-21.2.4-150400.68.18.1 * Mesa-libglapi0-debuginfo-21.2.4-150400.68.18.1 * libOSMesa8-21.2.4-150400.68.18.1 * Mesa-dri-21.2.4-150400.68.18.1 * Mesa-debugsource-21.2.4-150400.68.18.1 * Mesa-dri-debuginfo-21.2.4-150400.68.18.1 * Mesa-21.2.4-150400.68.18.1 * Mesa-libGLESv2-devel-21.2.4-150400.68.18.1 * Mesa-devel-21.2.4-150400.68.18.1 * libOSMesa-devel-21.2.4-150400.68.18.1 * Mesa-libEGL1-debuginfo-21.2.4-150400.68.18.1 * Mesa-libglapi0-21.2.4-150400.68.18.1 * Mesa-libglapi-devel-21.2.4-150400.68.18.1 * Mesa-libEGL1-21.2.4-150400.68.18.1 * Mesa-dri-devel-21.2.4-150400.68.18.1 * libOSMesa8-debuginfo-21.2.4-150400.68.18.1 * Mesa-libGL1-debuginfo-21.2.4-150400.68.18.1 * libgbm1-debuginfo-21.2.4-150400.68.18.1 * Mesa-libGLESv3-devel-21.2.4-150400.68.18.1 * Mesa-libEGL-devel-21.2.4-150400.68.18.1 * libgbm-devel-21.2.4-150400.68.18.1 * Mesa-libGL1-21.2.4-150400.68.18.1 * libgbm1-21.2.4-150400.68.18.1 * Mesa-drivers-debugsource-21.2.4-150400.68.18.1 * Mesa-KHR-devel-21.2.4-150400.68.18.1 * openSUSE Leap 15.4 (aarch64_ilp32) * Mesa-libd3d-64bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-dri-vc4-64bit-21.2.4-150400.68.18.1 * Mesa-vulkan-device-select-64bit-21.2.4-150400.68.18.1 *Mesa-vulkan-device-select-64bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libGL1-64bit-21.2.4-150400.68.18.1 * Mesa-libglapi-devel-64bit-21.2.4-150400.68.18.1 * libOSMesa8-64bit-21.2.4-150400.68.18.1 * libvdpau_nouveau-64bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-gallium-64bit-debuginfo-21.2.4-150400.68.18.1 * libXvMC_r600-64bit-21.2.4-150400.68.18.1 * Mesa-dri-nouveau-64bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-dri-vc4-64bit-debuginfo-21.2.4-150400.68.18.1 * libgbm1-64bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libEGL1-64bit-21.2.4-150400.68.18.1 * Mesa-dri-nouveau-64bit-21.2.4-150400.68.18.1 * libvdpau_r600-64bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libGL-devel-64bit-21.2.4-150400.68.18.1 * libvdpau_r300-64bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libGL1-64bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-libd3d-devel-64bit-21.2.4-150400.68.18.1 * libvdpau_nouveau-64bit-21.2.4-150400.68.18.1 * Mesa-libGLESv2-devel-64bit-21.2.4-150400.68.18.1 * libvdpau_r600-64bit-21.2.4-150400.68.18.1 * libvdpau_radeonsi-64bit-21.2.4-150400.68.18.1 * Mesa-gallium-64bit-21.2.4-150400.68.18.1 * Mesa-64bit-21.2.4-150400.68.18.1 * Mesa-libEGL-devel-64bit-21.2.4-150400.68.18.1 * Mesa-libGLESv1_CM-devel-64bit-21.2.4-150400.68.18.1 * Mesa-libglapi0-64bit-21.2.4-150400.68.18.1 * libgbm-devel-64bit-21.2.4-150400.68.18.1 * libXvMC_r600-64bit-debuginfo-21.2.4-150400.68.18.1 * Mesa-dri-64bit-debuginfo-21.2.4-150400.68.18.1 * libOSMesa-devel-64bit-21.2.4-150400.68.18.1 * Mesa-vulkan-overlay-64bit-21.2.4-150400.68.18.1 * Mesa-dri-64bit-21.2.4-150400.68.18.1 * Mesa-libglapi0-64bit-debuginfo-21.2.4-150400.68.18.1 * libvdpau_r300-64bit-21.2.4-150400.68.18.1 * libvdpau_radeonsi-64bit-debuginfo-21.2.4-150400.68.18.1 * libvulkan_radeon-64bit-debuginfo-21.2.4-150400.68.18.1 * libOSMesa8-64bit-debuginfo-21.2.4-150400.68.18.1 * libXvMC_nouveau-64bit-debuginfo-21.2.4-150400.68.18.1 *Mesa-vulkan-overlay-64bit-debuginfo-21.2.4-150400.68.18.1 * libvulkan_radeon-64bit-21.2.4-150400.68.18.1 * libgbm1-64bit-21.2.4-150400.68.18.1 * libXvMC_nouveau-64bit-21.2.4-150400.68.18.1 * Mesa-libd3d-64bit-21.2.4-150400.68.18.1 * Mesa-libEGL1-64bit-debuginfo-21.2.4-150400.68.18.1 * openSUSE Leap 15.4 (aarch64) * Mesa-dri-vc4-21.2.4-150400.68.18.1 * Mesa-dri-vc4-debuginfo-21.2.4-150400.68.18.1 * libvulkan_freedreno-21.2.4-150400.68.18.1 * libvulkan_broadcom-21.2.4-150400.68.18.1 * libvulkan_broadcom-debuginfo-21.2.4-150400.68.18.1 * libvulkan_freedreno-debuginfo-21.2.4-150400.68.18.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libgbm1-21.2.4-150400.68.18.1 * libgbm1-debuginfo-21.2.4-150400.68.18.1 * Mesa-debugsource-21.2.4-150400.68.18.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libgbm1-21.2.4-150400.68.18.1 * libgbm1-debuginfo-21.2.4-150400.68.18.1 * Mesa-debugsource-21.2.4-150400.68.18.1 * Basesystem Module 15-SP7 (x86_64) * Mesa-libVulkan-devel-21.2.4-150400.68.18.1 * Mesa-drivers-debugsource-21.2.4-150400.68.18.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * libXvMC_nouveau-debuginfo-21.2.4-150400.68.18.1 * libXvMC_nouveau-21.2.4-150400.68.18.1 * Mesa-drivers-debugsource-21.2.4-150400.68.18.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libgbm1-21.2.4-150400.68.18.1 * libgbm1-debuginfo-21.2.4-150400.68.18.1 * Mesa-debugsource-21.2.4-150400.68.18.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libgbm1-21.2.4-150400.68.18.1 * libgbm1-debuginfo-21.2.4-150400.68.18.1 * Mesa-debugsource-21.2.4-150400.68.18.1 ## References: * https://www.suse.com/security/cve/CVE-2026-40393.html * https://bugzilla.suse.com/show_bug.cgi?id=1261998 . Update fixes a moderate risk out-of-bounds memory access in Mesa for SUSE systems, enhancing system security.. SUSE security update, Mesa vulnerabilityfix, memory access issue, Linux system security, openSUSE patch. . LinuxSecurity.com Team

Calendar%202 May 13, 2026 SuSE
Banner 2 1028x280 1708121730 1 1771599631
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateSuSE

SUSE Linux Micro 6.2 Mesa Moderate Memory Access Issue Vuln 2026-21534-1

An update that solves one vulnerability and has one fix can now be installed.. # Security update for Mesa Announcement ID: SUSE-SU-2026:21534-1 Release Date: 2026-05-06T10:15:45Z Rating: moderate References: * bsc#1261911 * bsc#1261998 Cross-References: * CVE-2026-40393 CVSS scores: * CVE-2026-40393 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-40393 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-40393 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for Mesa fixes the following issue: * CVE-2026-40393: out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party (bsc#1261998). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-707=1 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le x86_64) * Mesa-libEGL1-debuginfo-24.3.3-160000.3.1 * Mesa-debugsource-24.3.3-160000.3.1 * Mesa-libEGL1-24.3.3-160000.3.1 * Mesa-libglapi0-24.3.3-160000.3.1 * Mesa-gallium-24.3.3-160000.3.1 * Mesa-dri-24.3.3-160000.3.1 * Mesa-gallium-debuginfo-24.3.3-160000.3.1 * libgbm1-24.3.3-160000.3.1 * Mesa-libGL1-debuginfo-24.3.3-160000.3.1 * Mesa-24.3.3-160000.3.1 * libgbm1-debuginfo-24.3.3-160000.3.1 * Mesa-drivers-debugsource-24.3.3-160000.3.1 * Mesa-dri-debuginfo-24.3.3-160000.3.1 * Mesa-libglapi0-debuginfo-24.3.3-160000.3.1 * Mesa-libGL1-24.3.3-160000.3.1 * SUSE Linux Micro 6.2 (s390x) * Mesa-libEGL1-debuginfo-24.1.7-160000.3.1 * Mesa-libglapi0-24.1.7-160000.3.1 * libgbm1-24.1.7-160000.3.1 *Mesa-dri-24.1.7-160000.3.1 * Mesa-libglapi0-debuginfo-24.1.7-160000.3.1 * Mesa-drivers-debugsource-24.1.7-160000.3.1 * Mesa-dri-debuginfo-24.1.7-160000.3.1 * Mesa-libGL1-debuginfo-24.1.7-160000.3.1 * Mesa-24.1.7-160000.3.1 * libgbm1-debuginfo-24.1.7-160000.3.1 * Mesa-libGL1-24.1.7-160000.3.1 * Mesa-libEGL1-24.1.7-160000.3.1 * Mesa-debugsource-24.1.7-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-40393.html * https://bugzilla.suse.com/show_bug.cgi?id=1261911 * https://bugzilla.suse.com/show_bug.cgi?id=1261998 . SUSE updates Mesa to fix out-of-bounds memory access issue with moderate severity. Patch details inside.. SUSE Mesa Update, Memory Access Fix, Linux Security Patch. . LinuxSecurity.com Team

Calendar%202 May 11, 2026 SuSE
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderatesecurity update

openSUSE Leap 16.0 Mesa Moderate Out-Of-Bounds Access Vuln 2026-20688-1

An update that solves one vulnerability and has 2 bug fixes can now be installed.. openSUSE security update: security update for mesa ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20688-1 Rating: moderate References: * bsc#1261911 * bsc#1261998 Cross-References: * CVE-2026-40393 Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has 2 bug fixes can now be installed. Description: This update for Mesa fixes the following issue: - CVE-2026-40393: out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party (bsc#1261998). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-707=1 Package List: - openSUSE Leap 16.0: Mesa-24.3.3-160000.3.1 Mesa-KHR-devel-24.3.3-160000.3.1 Mesa-devel-24.3.3-160000.3.1 Mesa-dri-24.3.3-160000.3.1 Mesa-dri-devel-24.3.3-160000.3.1 Mesa-dri-nouveau-24.3.3-160000.3.1 Mesa-dri-vc4-24.3.3-160000.3.1 Mesa-gallium-24.3.3-160000.3.1 Mesa-libEGL-devel-24.3.3-160000.3.1 Mesa-libEGL1-24.3.3-160000.3.1 Mesa-libGL-devel-24.3.3-160000.3.1 Mesa-libGL1-24.3.3-160000.3.1 Mesa-libGLESv1_CM-devel-24.3.3-160000.3.1 Mesa-libGLESv2-devel-24.3.3-160000.3.1 Mesa-libGLESv3-devel-24.3.3-160000.3.1 Mesa-libOpenCL-24.3.3-160000.3.1 Mesa-libRusticlOpenCL-24.3.3-160000.3.1 Mesa-libd3d-24.3.3-160000.3.1 Mesa-libd3d-devel-24.3.3-160000.3.1 Mesa-libglapi-devel-24.3.3-160000.3.1 Mesa-libglapi0-24.3.3-160000.3.1 Mesa-libva-24.3.3-160000.3.1 Mesa-vulkan-device-select-24.3.3-160000.3.1 Mesa-vulkan-overlay-24.3.3-160000.3.1 libOSMesa-devel-24.3.3-160000.3.1 libOSMesa8-24.3.3-160000.3.1 libgbm-devel-24.3.3-160000.3.1 libgbm1-24.3.3-160000.3.1 libvdpau_d3d12-24.3.3-160000.3.1 libvdpau_nouveau-24.3.3-160000.3.1 libvdpau_r600-24.3.3-160000.3.1 libvdpau_radeonsi-24.3.3-160000.3.1 libvdpau_virtio_gpu-24.3.3-160000.3.1 libvulkan_broadcom-24.3.3-160000.3.1 libvulkan_freedreno-24.3.3-160000.3.1 libvulkan_intel-24.3.3-160000.3.1 libvulkan_lvp-24.3.3-160000.3.1 libvulkan_radeon-24.3.3-160000.3.1 libxatracker-devel-1.0.0-160000.3.1 libxatracker2-1.0.0-160000.3.1 References: * https://www.suse.com/security/cve/CVE-2026-40393.html . An installation note regarding openSUSE security update addressing moderate issues in Mesa software with critical bug fixes.. openSUSE security patch Mesa vulnerability update. . LinuxSecurity.com Team

Calendar%202 May 08, 2026 OpenSUSE
Banner 2 1028x280 1708121730 1 1771599631
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics