Ubuntu Mesa WebGPU Memory Validation Vulnerability (USN-8427-1)

Vulnerability Overview Vulnerability ID: USN-8427-1 Publication Date: June 15, 2026 Description: Mesa did not correctly validate memory allocation sizes in WebGPU. Under specific circumstances, this may cause Mesa to crash or affect running programs when subjected to specially crafted inputs, potentially leading to denial of service or arbitrary code execution. Affected Versions Affected Versions: - Ubuntu 25.10 (questing) - Ubuntu 24.04 LTS (noble) - Ubuntu 22.04 LTS (jammy) Remediation Update Instructions: - Update the system to the following package versions: - Ubuntu 25.10 (questing): - libegl-mesa0 = 25.2.8-0ubuntu0.25.10.2 - libgbm1 = 25.2.8-0ubuntu0.25.10.2 - libgl1-mesa-dri = 25.2.8-0ubuntu0.25.10.2 - libglx-mesa0 = 25.2.8-0ubuntu0.25.10.2 - mesa-drm-shim = 25.2.8-0ubuntu0.25.10.2 - mesa-libgalium = 25.2.8-0ubuntu0.25.10.2 - mesa-opencl-icd = 25.2.8-0ubuntu0.25.10.2 - mesa-teflon-delegate = 25.2.8-0ubuntu0.25.10.2 - mesa-va-drivers = 25.2.8-0ubuntu0.25.10.2 - mesa-vdpau-drivers = 25.2.8-0ubuntu0.25.10.2 - mesa-vulkan-drivers = 25.2.8-0ubuntu0.25.10.2 - Ubuntu 24.04 LTS (noble): - libegl-mesa0 = 25.2.8-0ubuntu0.24.04.2 - libgbm1 = 25.2.8-0ubuntu0.24.04.2 - libgl1-mesa-dri = 25.2.8-0ubuntu0.24.04.2 - libglx-mesa0 = 25.2.8-0ubuntu0.24.04.2 - mesa-drm-shim = 25.2.8-0ubuntu0.24.04.2 - mesa-libgalium = 25.2.8-0ubuntu0.24.04.2 - mesa-opencl-icd = 25.2.8-0ubuntu0.24.04.2 - mesa-teflon-delegate = 25.2.8-0ubuntu0.24.04.2 - mesa-va-drivers = 25.2.8-0ubuntu0.24.04.2 - mesa-vdpau-drivers = 25.2.8-0ubuntu0.24.04.2 - mesa-vulkan-drivers = 25.2.8-0ubuntu0.24.04.2 - Ubuntu 22.04 LTS (jammy): - lib3dadapter9-mesa = 23.2.1-1ubuntu3.1~22.04.4 - libegl-mesa0 = 23.2.1-1ubuntu3.1~22.04.4 - libgbm1 = 23.2.1-1ubuntu3.1~22.04.4 - libgl1-mesa-dri = 23.2.1-1ubuntu3.1~22.04.4 - libglapi-mesa = 23.2.1-1ubuntu3.1~22.04.4 - libglx-mesa0 = 23.2.1-1ubuntu3.1~22.04.4 - libosmesa6 = 23.2.1-1ubuntu3.1~22.04.4 - libxatracker2 = 23.2.1-1ubuntu3.1~22.04.4 - mesa-drm-shim = 23.2.1-1ubuntu3.1~22.04.4 - mesa-opencl-icd = 23.2.1-1ubuntu3.1~22.04.4 - mesa-va-drivers = 23.2.1-1ubuntu3.1~22.04.4 - mesa-vdpau-drivers = 23.2.1-1ubuntu3.1~22.04.4 - mesa-vulkan-drivers = 23.2.1-1ubuntu3.1~22.04.4 Additional Notes: - A session restart is required after updating for all changes to take effect. - For more information, refer to How to get fixed. References CVE ID: CVE-2026-40393 Additional Information Reduce Security Risk: - Ubuntu Pro provides ten years of security coverage for packages in the main and universe repositories (over 25,000 packages), free for use on up to five machines. - Get Ubuntu Pro Contact If you have further questions, please contact team members.

Goal Reached Thanks to every supporter — we hit 100%!

Ubuntu Mesa WebGPU Memory Validation Vulnerability (USN-8427-1)