openEuler-SA-2026-2052

Synopsis:

mesa security updateSummary:

An update for mesa is now available for openEuler-24.03-LTSDescription:

.

Security Fix(es):

In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca.(CVE-2026-40393)Topic:

An update for mesa is now available for openEuler-24.03-LTS.

openEuler Security has rated this update as having a security impact of critical. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.Severity:

CriticalAffected Component:

mesa