264 matches found
AMD GPU DRI Driver Heap Buffer Overflow DoS
The vulnerability in the amdgpuamdkfdsubmitib function within the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfd.c file of the AMD GPU DRI driver in Linux operating systems is related to the reuse of previously freed memory. Exploitation of this vulnerability may allow an attacker to compromise the...
ROS-20260821-73-0024
The vulnerability of the gfxv90hwfini function in the drivers/gpu/drm/amd/amdgpu/gfxv90.c driver for AMD GPU cores in Linux operating systems is related to the use of a name with incorrect references. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
CVE-2026-74450
A flaw was found in the Linux kernel's AMD GPU power management component. This vulnerability, known as a use-after-free, occurs when the system attempts to access memory that has already been released. A local attacker could potentially exploit this flaw to cause a system crash denial of service...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102121)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102121 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size Why & How The VBIOS...
Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update
An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
RHEL 8 : kernel-rt (RHSA-2026:55765)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55765 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...
AMD GPU DRI Driver DoS
The vulnerability in the amdgpugmcfilterfaultsremove function within the drivers/gpu/drm/amd/amdgpu/amdgpugmc.c file of the AMD GPU DRI driver is related to dereferencing an invalid pointer. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
CVE-2026-74449
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix divide-by-zero in calculatemcachesetting on zero viewport If a plane reaches calculatemcachesetting with a zero-area viewport, calculatemcachesetting exits early with nummcaches == 0 and mvmpgwidth/height == ...
CVE-2026-74450
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix pptable use-after-free amdgpudpmgetpptable returns a pointer to a driver-owned power table after dropping adev-pm.mutex. The sysfs path then copies from that pointer. A concurrent pptable write can replace and fre...
CVE-2026-74449
The CVE-2026-74449 issue affects the Linux kernel DRM/AMD display path. A zero-area viewport can lead calculate_mcache_setting to exit with num_mcaches == 0 and mvmpg_width/height == 0, causing a divide-by-zero panic (and potential num_mcaches underflow). The fix changes calculate_mcache_setting ...
PT-2026-72284
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dma fence dedup array function where it returns 1 instead of 0 when called with the num fences variable equal to 0. This behavior occurs because the for-loop body...
Linux Distros Unpatched Vulnerability : CVE-2026-74447
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: fix uint32t overflow in EOP ring buffer size alignment eopringbuffersize in struct queueproperties is a u32. In kfdqueueacquirebuffers the expected...
SUSE CVE-2026-68109
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma7.1: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit c4f230b51cf2d3e7e8b1c800331f3dbed2a9e3f5...
CVE-2026-68447 drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size CRIU checkpoint copies the MQD control stack using cphqdcntlstacksize from hardware without bounding it to the allocated BO region. If the HW field is larger than...
CVE-2026-68430
CVE-2026-68430 affects the Linux kernel, specifically the DRM AMDGPU gfx8 path. The vulnerability arises from an unnecessary BUG_ON() that could crash the kernel; the fix is to drop this BUG_ON() check. The issue was resolved by cherry-picking the corresponding patch (commit 4d7c25208ca612b754f3b...
Linux Distros Unpatched Vulnerability : CVE-2026-68447
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size CRIU checkpoint copies the MQD control stack using cphqdcntlstacksize from hardware without...
CVE-2026-68112
A flaw was found in the drm/amdgpu/gfx9.4.3 component of the Linux kernel. This vulnerability is due to the use of BUGON macros in error handling, which, when triggered by specific error conditions, could cause the kernel to crash. This could result in a Denial of Service DoS for the system...
CVE-2026-68276
A flaw was found in the Linux kernel's drm/amdgpu/gfx component. A local attacker could exploit a buffer overflow vulnerability in the cleaner shader's sysfs path. This occurs because the system incorrectly writes 256 double words dwords into a buffer allocated for only 16 dwords 64 bytes...
CVE-2026-68252
A flaw was found in the drm/amdgpu/sdma7.0 component of the Linux kernel. This vulnerability could lead to a kernel crash, resulting in a Denial of Service DoS. The issue was caused by an improper use of BUGON which has been replaced with WARNON to prevent system instability...
