SUSE-SU-2026:1845-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2026:1845-1

MEDIUM6.8

Security update for Mesa

Published May 13, 2026

Modified 3 weeks ago

Fix available

Details

Description of the patch:

This update for Mesa fixes the following issue:

CVE-2026-40393: out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party (bsc#1261998).

Affected Packages(46 packages)

Mesa

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

24.3.3-150700.93.8.1

Mesa-32bit

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

24.3.3-150700.93.8.1

Mesa-KHR-devel

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

24.3.3-150700.93.8.1

Mesa-devel

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

24.3.3-150700.93.8.1

Mesa-dri

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

24.3.3-150700.93.8.1

Mesa-dri-32bit

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

24.3.3-150700.93.8.1

Mesa-dri-devel

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

24.3.3-150700.93.8.1

Mesa-gallium

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

24.3.3-150700.93.8.1

Mesa-gallium-32bit

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

24.3.3-150700.93.8.1

Mesa-libEGL-devel

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

24.3.3-150700.93.8.1

References

https://bugzilla.suse.com/1261998

https://lists.suse.com/pipermail/sle-updates/2026-May/046424.html

https://www.suse.com/security/cve/CVE-2026-40393/

https://www.suse.com/support/security/rating/

https://www.suse.com/support/update/announcement/2026/suse-su-20261845-1/

CVSS Analysis

CVSS v3.1

6.8

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

HighAC:H

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

NoneA:N

6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Upstream

Ecosystems

SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise Workstation Extension 15 SP7

Timeline

PublishedMay 13, 2026

ModifiedMay 13, 2026