SUSE-SU-2026:1835-1

Details

Description of the patch:

This update for Mesa fixes the following issue:

CVE-2026-40393: out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party (bsc#1261998).

Affected Packages

Mesa

SUSE Linux Enterprise Micro 5.5

Fixed in:

22.3.5-150500.77.8.1

Mesa-dri

SUSE Linux Enterprise Micro 5.5

Fixed in:

22.3.5-150500.77.8.1

Mesa-gallium

SUSE Linux Enterprise Micro 5.5

Fixed in:

22.3.5-150500.77.8.1

Mesa-libEGL1

SUSE Linux Enterprise Micro 5.5

Fixed in:

22.3.5-150500.77.8.1

Mesa-libGL1

SUSE Linux Enterprise Micro 5.5

Fixed in:

22.3.5-150500.77.8.1

Mesa-libglapi0

SUSE Linux Enterprise Micro 5.5

Fixed in:

22.3.5-150500.77.8.1

libgbm1

SUSE Linux Enterprise Micro 5.5

Fixed in:

22.3.5-150500.77.8.1

libvdpau_r300

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

22.3.5-150500.77.8.1

References