CVE-2026-40393

Name
CVE-2026-40393
Description
In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
cve@mitre.org https://gitlab.freedesktop.org/mesa/mesa/-/merge_requests/39866
cve@mitre.org https://lists.freedesktop.org/archives/mesa-dev/2026-February/226597.html

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:mesa3d:mesa:*:*:*:*:*:*:*:* mesa >= None < 25.3.6
cpe:2.3:a:mesa3d:mesa:26.0.0:*:*:*:*:*:*:* mesa == None == 26.0.0

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
mesa edge-main 26.0.0-r0 team/alpine-desktop <achill@achill.org> possibly vulnerable
mesa edge-main 25.2.7-r4 Achill Gilgenast <achill@achill.org> possibly vulnerable
mesa edge-main 25.2.7-r3 Achill Gilgenast <achill@achill.org> possibly vulnerable
mesa edge-main 25.2.7-r2 Achill Gilgenast <achill@achill.org> possibly vulnerable
mesa edge-main 25.2.7-r1 Achill Gilgenast <achill@achill.org> possibly vulnerable
mesa edge-main 25.2.7-r0 Achill Gilgenast <achill@achill.org> possibly vulnerable
mesa edge-main 25.2.6-r0 Achill Gilgenast <achill@achill.org> possibly vulnerable
mesa edge-main 25.2.5-r0 Achill Gilgenast <achill@achill.org> possibly vulnerable
mesa edge-main 25.2.4-r0 Achill Gilgenast <achill@achill.org> possibly vulnerable
mesa edge-main 25.2.3-r1 Achill Gilgenast <achill@achill.org> possibly vulnerable
mesa edge-main 25.2.3-r0 Achill Gilgenast <achill@achill.org> possibly vulnerable
mesa edge-main 25.2.2-r0 Achill Gilgenast <achill@achill.org> possibly vulnerable
mesa edge-main 25.2.1-r0 Achill Gilgenast <achill@achill.org> possibly vulnerable
mesa edge-main 25.1.8-r1 Achill Gilgenast <achill@achill.org> possibly vulnerable
mesa edge-main 25.1.8-r0 Achill Gilgenast <achill@achill.org> possibly vulnerable
mesa edge-main 25.1.7-r1 Achill Gilgenast <achill@achill.org> possibly vulnerable
mesa edge-main 25.1.7-r0 fossdd <fossdd@pwned.life> possibly vulnerable
mesa edge-main 25.1.6-r1 fossdd <fossdd@pwned.life> possibly vulnerable
mesa edge-main 25.1.6-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 25.1.5-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 25.1.4-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 25.1.4-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 25.1.3-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 25.1.3-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 25.1.2-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 25.1.2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 25.1.1-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 25.1.1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 25.1.0-r2 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 25.1.0-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 25.1.0-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 25.0.5-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 25.0.5-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 24.3.4-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 24.3.4-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 24.3.3-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 24.3.3-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 24.3.2-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 24.3.2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa edge-main 24.2.8-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa 3.23-main 25.2.7-r1 Achill Gilgenast <achill@achill.org> possibly vulnerable
mesa 3.22-main 25.1.9-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa 3.22-main 25.1.8-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa 3.22-main 25.1.6-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa 3.22-main 25.1.4-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa 3.21-main 24.2.8-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa 3.20-main 24.0.9-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mesa 3.19-main 23.3.6-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable