Amazon Linux 2023 Security Advisory: ALAS2023-2026-1623
Advisory Released Date: 2026-04-30
Advisory Updated Date: 2026-04-30
Severity:
Important
Issue Overview:
In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca. (CVE-2026-40393)
Affected Packages:
mesa
Issue Correction:
Run dnf update mesa --releasever 2023.11.20260427 or dnf update --advisory ALAS2023-2026-1623 --releasever 2023.11.20260427 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation
New Packages:
aarch64:
mesa-libGL-debuginfo-24.2.6-1268.amzn2023.0.1.aarch64
mesa-dri-drivers-debuginfo-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libxatracker-debuginfo-24.2.6-1268.amzn2023.0.1.aarch64
mesa-debuginfo-24.2.6-1268.amzn2023.0.1.aarch64
mesa-vulkan-drivers-debuginfo-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libglapi-debuginfo-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libd3d-devel-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libxatracker-devel-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libd3d-debuginfo-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libEGL-devel-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libGL-devel-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libOpenCL-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libOSMesa-debuginfo-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libxatracker-24.2.6-1268.amzn2023.0.1.aarch64
mesa-vulkan-drivers-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libOSMesa-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libEGL-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libgbm-debuginfo-24.2.6-1268.amzn2023.0.1.aarch64
mesa-vdpau-drivers-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libOSMesa-devel-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libEGL-debuginfo-24.2.6-1268.amzn2023.0.1.aarch64
mesa-filesystem-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libgbm-24.2.6-1268.amzn2023.0.1.aarch64
mesa-va-drivers-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libd3d-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libOpenCL-devel-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libOpenCL-debuginfo-24.2.6-1268.amzn2023.0.1.aarch64
mesa-dri-drivers-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libGL-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libgbm-devel-24.2.6-1268.amzn2023.0.1.aarch64
mesa-debugsource-24.2.6-1268.amzn2023.0.1.aarch64
mesa-libglapi-24.2.6-1268.amzn2023.0.1.aarch64
src:
mesa-24.2.6-1268.amzn2023.0.1.src
x86_64:
mesa-vulkan-drivers-debuginfo-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libxatracker-devel-24.2.6-1268.amzn2023.0.1.x86_64
mesa-dri-drivers-debuginfo-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libglapi-debuginfo-24.2.6-1268.amzn2023.0.1.x86_64
mesa-va-drivers-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libxatracker-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libd3d-devel-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libOpenCL-devel-24.2.6-1268.amzn2023.0.1.x86_64
mesa-vdpau-drivers-24.2.6-1268.amzn2023.0.1.x86_64
mesa-filesystem-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libGL-devel-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libgbm-devel-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libOSMesa-devel-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libOSMesa-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libGL-debuginfo-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libxatracker-debuginfo-24.2.6-1268.amzn2023.0.1.x86_64
mesa-debuginfo-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libOpenCL-debuginfo-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libgbm-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libEGL-24.2.6-1268.amzn2023.0.1.x86_64
mesa-vulkan-drivers-24.2.6-1268.amzn2023.0.1.x86_64
mesa-dri-drivers-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libd3d-debuginfo-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libOpenCL-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libOSMesa-debuginfo-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libglapi-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libEGL-devel-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libEGL-debuginfo-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libgbm-debuginfo-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libd3d-24.2.6-1268.amzn2023.0.1.x86_64
mesa-libGL-24.2.6-1268.amzn2023.0.1.x86_64
mesa-debugsource-24.2.6-1268.amzn2023.0.1.x86_64