CLSA-2026-1787314086

See a problem?

Import Source

https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json

JSON Data

https://api.osv.dev/v1/vulns/CLSA-2026-1787314086

Upstream

CVE-2026-40393

Published

2026-08-21T12:08:18Z

Modified

2026-10-26T09:31:47Z

Summary

Fix CVE(s): CVE-2026-40393

Details

SECURITY UPDATE: out-of-bounds memory access from an unbounded stack allocation in the SPIR-V front end (ELSCVE-171724)
- debian/patches/backport-STACK_ARRAY.patch: add the upstream src/util/stack_array.h helper, which the fix requires.
- debian/patches/CVE-2026-40393.patch: replace NIR_VLA, a bare alloca, with STACK_ARRAY at the two sites whose element count comes from the shader, in src/compiler/spirv/spirv_to_nir.c and src/compiler/nir/nir_inline_functions.c.
- CVE-2026-40393

References

Affected packages

TuxCare:Ubuntu:18.04

libd3dadapter9-mesa

Package

Name: libd3dadapter9-mesa
Purl: pkg:deb/tuxcare/libd3dadapter9-mesa?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

libd3dadapter9-mesa-dev

Package

Name: libd3dadapter9-mesa-dev
Purl: pkg:deb/tuxcare/libd3dadapter9-mesa-dev?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

libegl-mesa0

Package

Name: libegl-mesa0
Purl: pkg:deb/tuxcare/libegl-mesa0?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

libegl1-mesa

Package

Name: libegl1-mesa
Purl: pkg:deb/tuxcare/libegl1-mesa?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

libegl1-mesa-dev

Package

Name: libegl1-mesa-dev
Purl: pkg:deb/tuxcare/libegl1-mesa-dev?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

libgbm-dev

Package

Name: libgbm-dev
Purl: pkg:deb/tuxcare/libgbm-dev?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

libgbm1

Package

Name: libgbm1
Purl: pkg:deb/tuxcare/libgbm1?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

libgl1-mesa-dev

Package

Name: libgl1-mesa-dev
Purl: pkg:deb/tuxcare/libgl1-mesa-dev?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

libgl1-mesa-dri

Package

Name: libgl1-mesa-dri
Purl: pkg:deb/tuxcare/libgl1-mesa-dri?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

libgl1-mesa-glx

Package

Name: libgl1-mesa-glx
Purl: pkg:deb/tuxcare/libgl1-mesa-glx?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

libglapi-mesa

Package

Name: libglapi-mesa
Purl: pkg:deb/tuxcare/libglapi-mesa?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

libgles2-mesa

Package

Name: libgles2-mesa
Purl: pkg:deb/tuxcare/libgles2-mesa?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

libgles2-mesa-dev

Package

Name: libgles2-mesa-dev
Purl: pkg:deb/tuxcare/libgles2-mesa-dev?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

libglx-mesa0

Package

Name: libglx-mesa0
Purl: pkg:deb/tuxcare/libglx-mesa0?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

libosmesa6

Package

Name: libosmesa6
Purl: pkg:deb/tuxcare/libosmesa6?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

libosmesa6-dev

Package

Name: libosmesa6-dev
Purl: pkg:deb/tuxcare/libosmesa6-dev?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

libwayland-egl1-mesa

Package

Name: libwayland-egl1-mesa
Purl: pkg:deb/tuxcare/libwayland-egl1-mesa?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

libxatracker-dev

Package

Name: libxatracker-dev
Purl: pkg:deb/tuxcare/libxatracker-dev?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

libxatracker2

Package

Name: libxatracker2
Purl: pkg:deb/tuxcare/libxatracker2?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

mesa-common-dev

Package

Name: mesa-common-dev
Purl: pkg:deb/tuxcare/mesa-common-dev?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

mesa-opencl-icd

Package

Name: mesa-opencl-icd
Purl: pkg:deb/tuxcare/mesa-opencl-icd?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

mesa-va-drivers

Package

Name: mesa-va-drivers
Purl: pkg:deb/tuxcare/mesa-va-drivers?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

mesa-vdpau-drivers

Package

Name: mesa-vdpau-drivers
Purl: pkg:deb/tuxcare/mesa-vdpau-drivers?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"

mesa-vulkan-drivers

Package

Name: mesa-vulkan-drivers
Purl: pkg:deb/tuxcare/mesa-vulkan-drivers?distro=ubuntu-18.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20.0.8-0ubuntu1~18.04.1+tuxcare.els1

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787314086.json"