CVE-2026-99150

A flaw was found in the Linux kernel's AMD GPU driver. When an error occurs while copying register data to user space during a debugfs read operation, the driver improperly releases a runtime Power Management PM reference twice. A local user could exploit this flaw by providing an invalid memory...

CVE-2026-99090

A flaw was found in the Linux kernel's AMD GPU driver. A local user could cause a Denial of Service DoS or system instability by triggering GPU recovery operations. Due to a race condition, the driver allows vertical blanking vblank counter reads from display hardware without proper lock...

CVE-2026-98910

A flaw was found in the Linux kernel's AMD GPU driver amdkfd. When enabling a debug trap fails during data transfer to user space, the kernel fails to clean up previously allocated resources and state, leaving an inconsistent trap state and an unreleased process reference count. A local attacker...

CVE-2026-98905

A flaw was found in the Linux kernel's AMD GPU driver. This vulnerability allows a local user to cause a denial of service DoS and crash the system during Checkpoint/Restore In Userspace CRIU operations. The issue occurs because the driver fails to properly acquire and initialize queue buffers wh...

CVE-2026-98898

A flaw was found in the Linux kernel's AMD GPU driver. When dynamic power management DPM is disabled, the driver attempts to schedule thermal management tasks on an uninitialized work queue upon receiving an interrupt. A local user could exploit this condition to trigger a kernel crash, resulting...

CVE-2026-98894

A flaw was found in the AMD GPU driver within the Linux kernel. When handling overflow conditions in the Common Platform Error Record CPER ring buffer, the driver relies on parsed entry sizes from the buffer contents without verifying that the read pointer advances. Corrupt error record data can...

CVE-2026-80907

A flaw was found in the AMD GPU driver within the Linux kernel. This vulnerability involves an incorrect calculation of the minimum size for the Unified Video Decoder UVD decoded picture buffer DPB when processing H264 video. Instead of using the actual number of references from the video's decod...

CVE-2026-98784

A flaw was found in the AMD GPU driver within the Linux kernel. During graphics block teardown, the driver fails to release previously loaded microcode firmware resources. A local user could exploit this behavior through repeated device re-initialization and teardown operations, resulting in a...

CVE-2026-98780

A flaw was found in the Linux kernel's AMD GPU driver. When registering hardware discovery entries within the sysfs system filesystem interface, the driver fails to release allocated memory if a kernel object fails to register. An unexpected registration failure can cause the memory to remain...

CVE-2026-98786

A flaw was found in the Linux kernel's AMD GPU display driver. During DisplayPort Multi-Stream Transport MST display disconnection, a race condition can cause the driver to access display data structures without verifying that they remain valid. A local user or physically proximate attacker...

CVE-2026-89812

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit driver. When the Multimedia Engine Scheduler MES ring stops responding and a system reset is triggered, the MES ring fences are not properly completed. This can lead to the system becoming unresponsive after resuming from the...

CVE-2026-93177

A flaw was found in the Linux kernel's AMD GPU powerplay module. This vulnerability arises from missing bounds checks when processing voltage indices from VBIOS-parsed tables. An attacker could potentially exploit this by providing specially crafted VBIOS data, leading to an out-of-bounds read...

CLSA-2025-1758796886 kernel: Fix of 23 CVEs

drm/amd/amdgpu: introduce gcmes2.bin v2 - proc: fix a dentry lock race between releasetask and lookup - scsi: aacraid: Stop using PCIIRQAFFINITY - scsi: aacraid: Remove useless code - scsi: aacraid: Remove unused aaccheckhealth - scsi: aacraid: struct user,sgmap,64,raw: Replace 1-element arrays...

CVE-2026-90286

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit driver, specifically affecting GFX6 series GPUs. This vulnerability stems from incorrect handling of the Pre-Fetch Parser PFP on compute queues, which can lead to synchronization issues. An attacker could potentially exploit...

CVE-2026-98270

A flaw was found in the Linux kernel's AMD GPU driver. The driver fails to verify that internal reliability and error-handling structures are initialized before accessing them during interrupt handling. If an interrupt occurs during this early startup window, the driver encounters a null pointer...

CVE-2026-98178

A flaw was found in the Linux kernel's AMD GPU driver. When compute subsystem initialization fails, uninitialized device structures remain attached to the graphics driver. A local user capable of triggering a GPU reset can cause the system to dereference an unallocated memory pointer, resulting i...

CVE-2026-98177

A flaw was found in the Linux kernel's AMD GPU driver amdkfd. A local user could trigger a Denial of Service DoS or system instability due to an integer underflow vulnerability during the calculation of the End of Pipe EOP ring buffer size. Under specific conditions, this improper calculation cou...

ROS-20261007-73-0090

The vulnerability of the amdgpuamdkfdsubmitib function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfd.c driver for AMD GPU cores in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amd: Protection against bad data for the ATIF ACPI method. If a BIOS provides bad data in response to an ATIF method call, this causes a NULL pointer dereference in the caller. The vulnerability has been encountered on at lea...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: amdgputtmgartbind set gtt bound flag Otherwise, after the GTT context is released, the GTT and gart space are freed. However, amdgputtmbackendunbind does not clear the gart page table entry; instead, it leaves a valid...