CVE-2026-97428: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: harden FRU PIA parsing with bounded helpers Replace the open-coded TLV walk with frupiaadvance and frupiacopyfield helpers that bound every read by the actual EEPROM data length, preventing out-of-bounds reads on...

CVE-2026-97426: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error Return the parse error before acquiring PM access...

CVE-2026-97425: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix buffer overflow during vBIOS update Clamp the buffer postion to write by setting the bin attribute to the maximum buffer size so that VFS layer will block the out-of-bounds accessing...

CVE-2026-97424: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: add rassuspend callback and use it for cpeccerrorirq cpeccerrorirq is acquired in amdgpugfxraslateinit but released in gfxv90hwfini, so the put site has to query amdgpuirqenabled because the get is skipped on SR-I...

CVE-2026-93809: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: flush pending RCU callbacks on module unload Call rcubarrier in module exit to wait for outstanding callrcu callbacks before freeing module text, preventing late callback execution in freed memory. BUG: unable to hand...

PT-2026-98009

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where pending RCU callbacks are not flushed during module unload. This can lead to a page fault if call rcu callbacks are executed after the...

PT-2026-98062

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component regarding the parsing of Field Replaceable Unit FRU Product Information Area PIA data. The original implementation used an open-coded...

PT-2026-98059

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow occurs during a vBIOS update in the drm/amdgpu component. The issue is addressed by clamping the buffer position to write by setting the bin attribute to the maximum...

PT-2026-98058

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/ras component where cp ecc error irq is acquired in amdgpu gfx ras late init but released in gfx v9 0 hw fini. This mismatch requires the release site t...

PT-2026-98060

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/pm component where the SmartShift bias sysfs store fails to handle the PM refcount correctly during a parse error. The system should return the parse...

PT-2026-98112

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where the GPIO I2C table entry count from the VBIOS is not properly bounded. This can lead to an overrun of the adev-i2c bus array or cause th...

PT-2026-98113

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where the fw pri buf PSP private buffer was handled using open-coded memset and memcpy operations without proper validation. The fix involves...

PT-2026-104918

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Bound GPIO I2C table entry count from VBIOS Reject undersized tables and cap the derived entry count to AMDGPU MAX I2C BUS so we do not overrun adev-i2c bus or walk an absurd number of entries on corrupt size fields...

PT-2026-104963

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: flush pending RCU callbacks on module unload Call rcu barrier in module exit to wait for outstanding call rcu callbacks before freeing module text, preventing late callback execution in freed memory. BUG: unable to...

PT-2026-104966

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix buffer overflow during vBIOS update Clamp the buffer postion to write by setting the bin attribute to the maximum buffer size so that VFS layer will block the out-of-bounds accessing...

PT-2026-104987

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction mqd and fw objects are queue core objects which should remain valid and never be unmapped and evicted for user queues to work properly. During eviction if these buffers...

PT-2026-104897

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: add ras suspend callback and use it for cp ecc error irq cp ecc error irq is acquired in amdgpu gfx ras late init but released in gfx v9 0 hw fini, so the put site has to query amdgpu irq enabled because the get i...

PT-2026-104912

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: harden FRU PIA parsing with bounded helpers Replace the open-coded TLV walk with fru pia advance and fru pia copy field helpers that bound every read by the actual EEPROM data length, preventing out-of-bounds reads on...

ALSA-2026:71602 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: fbcon: Set fbdisplayi-mode to NULL when the mode is released CVE-2025-40323 kernel: libceph: fix potential use-after-free in havemonandosdmap CVE-2025-68285 kernel: libceph: make decodepo...

ALSA-2026:71329 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amdgpu: Fix fence put before wait in amdgpuamdkfdsubmitib CVE-2026-31566 kernel: netfilter: nfqueue: hold bridge skb-dev while queued CVE-2026-52912 kernel: Linux kernel: PPPoE memory...