kernel: drm/amdgpu/vce: fix integer overflow in image size

A flaw was found in the drm/amdgpu/vce component of the Linux kernel. Malicious VCE Video Codec Engine command streams with oversized dimensions can cause a 32-bit integer overflow. This overflow bypasses validation, allowing the GPU firmware to perform out-of-bound memory access. This could lead...

PT-2026-114368

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where the gfx idle work may invoke the switch power profile function before a GPU reset is fully completed. This leads to an assert error...

CVE-2026-98389: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip gfx switchpowerprofile during GPU reset During resume from GPU reset, the gfx idle work may invoke switchpowerprofile before the reset completes. This causes the following assert error because the register access...

ROS-20261014-73-0079

The vulnerability of the vcnv30decmsg function in the drivers/gpu/drm/amd/amdgpu/vcnv30.c driver for AMD GPU cores in Linux operating systems is related to reading beyond the buffer boundaries. Exploiting this vulnerability may allow an attacker to access protected information or cause service...

ROS-20261014-73-0057

The vulnerability of the vcnv40decmsg function in the drivers/gpu/drm/amd/amdgpu/vcnv40.c driver for AMD GPU cores in Linux’s Direct Rendering Infrastructure DRI kernel relates to buffer overflow attacks. Exploiting this vulnerability can allow attackers to access protected information or cause...

ROS-20261014-73-0075

The vulnerability of the sdmav40ringemitfence function in the drivers/gpu/drm/amd/amdgpu/sdmav40.c driver for AMD GPU cores in Linux’s Direct Rendering Infrastructure DRI kernel is related to improper disabling or release of resources. Exploiting this vulnerability can allow a remote attacker to...

kernel security update

4.18.0-553.173.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

UBUNTU-CVE-2026-98389

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip gfx switchpowerprofile during GPU reset During resume from GPU reset, the gfx idle work may invoke switchpowerprofile before the reset completes. This causes the following assert error because the register access...

Linux Distros Unpatched Vulnerability : CVE-2026-98389

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: skip gfx switchpowerprofile during GPU reset During resume from GPU reset, the gfx idle work may invoke switchpowerprofile before the reset complete...

CVE-2026-98389

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip gfx switchpowerprofile during GPU reset During resume from GPU reset, the gfx idle work may invoke switchpowerprofile before the reset completes. This causes the following assert error because the register access...

kernel: drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()

A flaw was found in the drm/amdgpu component of the Linux kernel. A use-after-unlock vulnerability exists where a virtual machine VM pointer is dereferenced after its protective lock has been released. This allows the pointer to be modified, potentially leading to memory corruption. An attacker...

ROS-20261013-73-0494

The vulnerability of the amdgputtminitonchip function in the drivers/gpu/drm/amd/amdgpu/amdgputtm.c driver for AMD GPU cores in Linux operating systems is related to improper resource release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20261009-73-0553

The vulnerability of the initkfdvm function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c driver for AMD GPU cores in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

SUSE CVE-2026-98178

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip KFD mapping clear before initialization amdgpuamdkfdclearkfdmapping assumes that a non-NULL kfddev has a fully populated node array. This is not true when KFD device initialization fails after probe. For example,...

SUSE CVE-2026-98179

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix rmmio iounmap skipped on device removal amdgpupciremove calls drmdevunplug before finisw, so drmdeventer is already false there and the iounmap guarded by it is skipped. This .remove path runs on both hot-unplug a...

CVE-2026-98179

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. This issue can lead to a Denial of Service DoS caused by resource exhaustion during device removal or driver unloading. Because the cleanup routine fails to release mapped input/output I/O register memory, a privileged local user could...

K000163599: Linux kernel vulnerability CVE-2026-53375

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that only one of lo/hi is valid, the patching could result in a bad address written to in FW. CVE-2026-53375 Impact There is no impact; F5...

SUSE CVE-2026-98270

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before dereference nbiov79handlerascontrollerintrnobifring dereferences ras and obj without checking either for NULL. Both amdgpurasgetcontext and amdgpurasfindobj can return NULL, e.g. during the...

SUSE CVE-2026-98165

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

ROS-20261007-73-0090

The vulnerability of the amdgpuamdkfdsubmitib function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfd.c driver for AMD GPU cores in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...