CVE-2026-97431

A flaw was found in the Linux kernel's AMD display driver. When updating display streams, the driver improperly handles phantom streams that have already been destroyed, triggering a null pointer dereference. A local attacker can trigger this issue during display power management operations,...

CVE-2026-97429

A flaw was found in the Linux kernel's AMD KFD Kernel Fusion Driver subsystem. A race condition occurs during queue destruction when internal locks are released while waiting for a queue to resume, allowing a concurrent destroy operation to prematurely free the queue object. A local user could...

CVE-2026-97427

A flaw was found in the Linux kernel's AMD GPU power management driver. A local user with write access to the powerplay sysfs interface could trigger a heap-based buffer overflow by providing input data exceeding the allocated buffer size. This issue can lead to memory corruption, resulting in a...

USN-8728-3 linux-oracle-7.0 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

USN-8728-3: Linux kernel (Oracle) vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

ROS-20260929-73-0035

The vulnerability of the dcstreamgetscanoutpos function in the drivers/gpu/drm/amd/display/dc/core/dcstream.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow a...

SUSE CVE-2026-98002

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix ineffective error check in nested domain allocation amdiommupdomidalloc returns an int: a domain ID on success, or the negative errno from idaallocrange when the ID space is exhausted or memory is short...

CVE-2026-98003

A flaw was found in the Linux kernel's AMD Input-Output Memory Management Unit IOMMU driver. When the system resumes from sleep, the driver reallocates internal logging buffers without releasing previously allocated memory and performs memory requests in an invalid context. A local user with powe...

CVE-2026-98002

A flaw was found in the Linux kernel's AMD IOMMU Input-Output Memory Management Unit driver. This flaw allows a local user to cause a Denial of Service DoS or system instability during nested domain allocation. When domain identifiers or memory resources are exhausted, an allocation error value i...

CVE-2026-98146

A flaw was found in the Linux kernel's AMD XDNA driver, which can result in a Denial of Service DoS. The driver processes command chains located in shared memory that can be concurrently modified by userspace. By altering the command counter during execution, a local attacker can cause a bounds...

CVE-2026-93823

A flaw was found in the Linux kernel's AMD GPU driver amdkfd. A local user with access to the GPU device interface can trigger excessive kernel memory allocation by providing an abnormally large buffer size parameter during an input/output control ioctl request. This issue can exhaust system memo...

CVE-2026-98145

A flaw was found in the Linux kernel's AMD XDNA driver. A local user with access to the accelerator device node can trigger a Denial of Service DoS by submitting an empty command chain with a zero command count. Because the driver fails to properly validate the command count, it processes an empt...

CVE-2026-98144

A flaw was found in the Linux kernel's AMD XDNA accelerator driver. A local user could cause a denial of service DoS by triggering a resource leak during command error handling. By manipulating buffer handles and importing an unmappable memory buffer object BO, an attacker can cause buffer mappin...

CVE-2026-93809

A flaw was found in the Linux kernel's AMD GPU driver amdgpu. A local user with administrative privileges could cause a Denial of Service DoS by unloading the driver module while callbacks are still scheduled. Because the driver does not wait for pending Read-Copy Update RCU callbacks to complete...

ROS-20260928-73-0084

The vulnerability of the Linux operating system’s components such as drivers, GPU, DRM, AMD, and AMDGPU cores is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause service failures...

INTCC: A Framework for Interactive Confidential Computing

Confidential computing leverages Trusted Execution Environments TEEs to ensure the confidentiality and integrity of data in use. However, TEEs rely on remote attestation to guarantee the integrity of their initial memory state. This model is fundamentally at odds with interactive development...

CVE-2026-100839

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack "BadAML". ACPI tables containing AML bytecode are passed from the untrusted host QEMU to the guest firmware OVMF and on to the Linu...

EUVD-2026-87849

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack "BadAML". ACPI tables containing AML bytecode are passed from the untrusted host QEMU to the guest firmware OVMF and on to the Linu...

CVE-2026-100839 Contrast before 1.18.0 AML Injection Remote Code Execution

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack "BadAML". ACPI tables containing AML bytecode are passed from the untrusted host QEMU to the guest firmware OVMF and on to the Linu...

CVE-2026-100839

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack "BadAML". ACPI tables containing AML bytecode are passed from the untrusted host QEMU to the guest firmware OVMF and on to the Linu...