4339 matches found
CVE-2026-68272
A flaw was found in the Linux kernel's drm/amdgpu component. An unprivileged local attacker can exploit this vulnerability by submitting a specially crafted command with a zero-length chunk size for CPGFXSHADOW. This leads to improper memory access within the kernel, causing a system crash and a...
CVE-2026-68238
A flaw was found in the drm/amdgpu component of the Linux kernel. The amdgpuacpivfctbios function fails to release a reference to the VFCT ACPI table after fetching it. This oversight leads to a resource leak, where memory allocated for the table mapping is not properly freed, potentially impacti...
CVE-2026-68250
A flaw was found in the drm/amdgpu/sdma5.2 component of the Linux kernel. A local attacker could potentially trigger a condition that would previously lead to a kernel panic due to a BUGON macro. This vulnerability could result in a system-wide Denial of Service DoS, making the system unresponsiv...
Linux Kernel Security Vulnerabilities
Versions of the Linux kernel prior to 7.1.6 have a security vulnerability. This vulnerability arises from the use of kzalloc to allocate memory for struct dc structures. When the size of the structure exceeds 4 MiB, allocation fails, which may lead to amdgpu detection failures...
CVE-2026-68273
A flaw was found in the Linux kernel's amdgpu graphics driver. Improper handling of context pstate overrides can lead to use-after-free and NULL pointer dereferences during context initialization and finalization. A local attacker could exploit this vulnerability to cause system instability or a...
CVE-2026-68103
A flaw was found in the drm/amdgpu component of the Linux kernel. A local attacker could exploit a vulnerability where creating a user-queue with specific parameters overwrites an existing doorbell mapping. This could lead to misrouting of interrupt requests IRQs and incorrect cleanup processes,...
CVE-2026-68234
A flaw was found in the Linux kernel's drm/amdgpu component. The amdgpubocreatereserved function unconditionally increments a pin counter for a Buffer Object BO even if it is already pinned. This occurs when the function is called multiple times with the same BO, such as during firmware buffer...
CVE-2026-68101
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix check in amdgpuhmminvalidategfx For a short moment during alloc/free the userptr BO is not part of his VM, so bo-vmbo can be NULL. Keep a reference to the VM root PD as parent of the userptr BO so that we can alwa...
CVE-2026-68245
A flaw was found in the drm/amdgpu component of the Linux kernel. A use-after-unlock vulnerability exists where a virtual machine VM pointer is dereferenced after its protective lock has been released. This allows the pointer to be modified, potentially leading to memory corruption. An attacker...
CVE-2026-68109
A flaw was found in the Linux kernel, specifically within the drm/amdgpu/sdma7.1 component. This vulnerability occurs when a BUGON macro is triggered, which can lead to an immediate kernel crash. An attacker could potentially exploit this to cause a Denial of Service DoS on the affected system...
drm/amdgpu: Fix kernel panic during driver load failure
...
drm/amdgpu: fix aperture mapping leak
...
drm/amdgpu: reject mapping a reserved doorbell to a new queue
...
drm/amdgpu/vcn4: avoid rereading IB param length
...
drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON()
...
drm/amdgpu/vce: fix integer overflow in image size
...
drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()
...
drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1
...
drm/amdgpu: invoke pm_genpd_remove() before freeing genpd
...
DEBIAN-CVE-2026-68275
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check amdgpuvmbofind result in GETMAPPINGINFO The AMDGPUGEMOPGETMAPPINGINFO path of amdgpugemopioctl looks up the bova for the buffer object in the caller's VM via amdgpuvmbofind, but uses the returned pointer without...