Mesa Graphics Patch Notes: WebGPU Security Fix — Version 26.0.1

- Version Number: Mesa 26.0.1
- Security Fix: Patched out-of-bounds memory access in WebGPU
- Driver Stability: Fixes for Intel (Anv), AMD (RADV), and NVIDIA (HK)
- Platform Support: Critical updates for Asahi (Apple Silicon) and Panfrost (Mali)
- Next Update: Mesa 26.0.2 scheduled for March 11, 2026
The first point-release of the Mesa 26.0 cycle has landed, and if you’re gaming on Linux, this is one of those updates you shouldn't sit on. Developer Eric Engestrom has announced the release of Mesa 26.0.1, and while point-one releases are usually about minor polish, this one carries the weight of an essential security patch. We’re looking at a collection of fixes that touch everything from high-end Intel Xe hardware to the ongoing effort of gaming on Apple Silicon via the Asahi drivers.
"This release and the previously released Mesa 25.3.6 include 'a security fix preventing out-of-bounds memory access in WebGPU' and that both of these releases should be 'deployed to users as quickly as possible.'"
The WebGPU Security Priority
First things first: the security fix. The team identified an out-of-bounds memory access vulnerability within WebGPU. This isn't just a "game might crash" situation; memory access vulnerabilities are the kind of thing that can lead to nastier exploits. The fix has been backported to Mesa 25.3.6 as well, marking the end of the road for that specific series. For those of us on the bleeding edge with the 26.0 branch, getting onto 26.0.1 is the only way to stay secure. It’s rare to see a driver update carry this much urgency, but when the devs say "deploy as quickly as possible," we listen.
Intel and AMD: Stability Buffs for Team Blue and Red
For the desktop crowd, the Anv (Intel Vulkan) and RADV (AMD Vulkan) drivers received the most attention. Intel users—specifically those looking at newer Xe2 and Xe3 hardware—will see better behavior with CCS (Color Control Surface) modifiers. There’s a specific fix for Intel's Anv driver to flush render caches on the first pipeline select, which should iron out some of those annoying first-run stutters that can plague a fresh game session.
On the AMD side, RADV is getting some much-needed stability. We’ve seen reports of GPU hangs when dealing with secondary command buffers on the transfer queue, and 26.0.1 supposedly puts that fire out. There are also fixes for depth/stencil resolves, which often cause visual artifacts or "black square" bugs in complex 3D scenes if the regions aren't handled correctly. If you've been experiencing random hangs in your favorite Vulkan titles on an RDNA card, this patch is aimed directly at you.
A Quick Look at the ACO Compiler
The ACO compiler, which handles shader compilation for AMD hardware, also saw some love. Rhys Perry pushed through several fixes, including a fix for scratch stores on older GFX6-8 hardware and hazard resolution before calls. While these sound like deep-level technical jargon, the end result for the player is fewer "busted" shaders and better overall frame pacing. It’s these under-the-hood tweaks that keep the Linux gaming experience feeling snappy compared to the often-bloated proprietary alternatives.
Handhelds and Mobile: ARM and Apple Silicon Updates
The Linux gaming world isn't just about desktops anymore. The Panfrost and PanVK drivers, which power ARM-based Mali GPUs, received a significant number of commits. We see fixes for tile load/store intrinsics and Z/S (Depth/Stencil) descriptor creation. For the mobile gaming community, these are big QoL improvements that ensure mobile GPUs are following the Vulkan spec more closely.
The Asahi driver—the hero project bringing Linux to Apple Silicon—is also moving forward. Janne Grunau implemented a change to use the GPU for buffer copies in resource copy regions. Previously, these types of operations might have fallen back to less efficient methods, so moving this to the GPU is a direct performance buff for anyone crazy enough (and we love you for it) to be gaming on an M-series Mac running Linux.
What’s Next on the Roadmap?
Mesa 26.0.1 is just the start. The release schedule is already locked in for the next few months. We expect 26.0.2 to hit on March 11, followed by bi-weekly updates until the 26.0 branch reaches its "last planned" status with 26.0.7 in late May. For those who care about the next big jump, the 26.1 branch is expected to start its release candidate phase in mid-April.
Our Take: Don't Wait
Usually, we tell gamers to wait a few days to see if a new driver version breaks anything (the classic "day zero" risk). However, given the WebGPU security fix and the sheer volume of stability improvements for Intel and AMD, 26.0.1 feels like a mandatory upgrade. Whether you're chasing the highest frames on a Radeon card or just want to make sure your browser doesn't become a security hole, it's time to check your package manager. Most rolling-release distributions should have this in the repos within the next 48 hours.
Frequently Asked Questions
- Why is the Mesa 26.0.1 update considered a critical security release?
- Mesa 26.0.1 patches a vulnerability in WebGPU involving out-of-bounds memory access that developers recommend deploying as quickly as possible to prevent exploits.
- Which graphics drivers received stability improvements in Mesa 26.0.1?
- This update includes specific stability buffs and fixes for Intel (Anv), AMD (RADV), NVIDIA (HK), Asahi (Apple Silicon), and Panfrost (Mali) drivers.
- Is the WebGPU security fix available for older Mesa versions?
- Yes, the security fix has been backported to Mesa 25.3.6, which marks the final release for that specific driver series.
- When is the next Mesa driver update scheduled after 26.0.1?
- The next point release, Mesa 26.0.2, is currently scheduled to land on March 11, 2026.