933 matches found
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix listdel corruption in kfdcriuresumesvm The cleanup tail of kfdcriuresumesvm walks svms-criusvmmetadatalist and kfrees each struct criusvmmetadata without removing them from the list. The list head remains pointing...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds in allocateeventnotificationslot The valid event ids range from 0 to KFDSIGNALEVENTLIMIT. allocateeventnotificationslot includes an option to specify an event id to allocate, which is used by CRIU. We did...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free amdgpuamdkfdgpuvmfreememoryofgpu unpins DOORBELL and MMIO remap BOs which are pinned at allocation time before checking whether the BO is still mapped to the GPU. When t...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: hold eventmutex while checkpointing CRIU events kfdcriucheckpointevents counts the entries in p-eventidr via kfdgetnumevents, allocates an array sized to that count, and then walks the same IDR to fill it. Neither the...
CVE-2026-80747
A flaw was found in the drm/amdkfd component of the Linux kernel. A remote attacker could exploit this vulnerability by providing a malformed Cache Region Allocation Table CRAT with an oversized length field. This oversight in the CRAT parser, which validates the subtype header but not its...
SUSE CVE-2026-98905
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When kfdqueueacquirebuffers was split off from setqueuepropertiesfromuser, setqueuepropertiesfromcriu was missed. Thus, setqueuepropertiesfromcriu is not filling out the...
CVE-2026-98910
A flaw was found in the Linux kernel's AMD GPU driver amdkfd. When enabling a debug trap fails during data transfer to user space, the kernel fails to clean up previously allocated resources and state, leaving an inconsistent trap state and an unreleased process reference count. A local attacker...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146145)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146145 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add bounds check for CRAT subtype length The CRAT parser validates that the subtype...
Oracle Linux 10 : kernel (ELSA-2026-88477)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88477 advisory. - drm/amdgpu: Bound GPIO I2C table entry count from VBIOS Anusha Srivatsa RHEL-278280 CVE-2026-97493 - drm/amdkfd: Add TLB flush after MES queue...
CVE-2026-89810
A flaw was found in the Linux kernel's drm/amdkfd component. When page migration from a device to system RAM fails, the driver incorrectly uses a DMA Direct Memory Access address instead of a physical address to release and unlock allocated system pages. This improper handling of memory resources...
SUSE CVE-2026-98910
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unwind debug trap enable on copytouser failure If kfddbgtrapenable fails while copying runtimeinfo to userspace, it had already activated the trap, set debugtrapenabled, taken an extra process reference, and opened th...
DEBIAN-CVE-2026-98910
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unwind debug trap enable on copytouser failure If kfddbgtrapenable fails while copying runtimeinfo to userspace, it had already activated the trap, set debugtrapenabled, taken an extra process reference, and opened th...
AZL-110674 CVE-2026-98910 affecting package kernel for versions less than 6.6.159.1-1
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unwind debug trap enable on copytouser failure If kfddbgtrapenable fails while copying runtimeinfo to userspace, it had already activated the trap, set debugtrapenabled, taken an extra process reference, and opened th...
CVE-2026-98910
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unwind debug trap enable on copytouser failure If kfddbgtrapenable fails while copying runtimeinfo to userspace, it had already activated the trap, set debugtrapenabled, taken an extra process reference, and opened th...
CVE-2026-98905
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When kfdqueueacquirebuffers was split off from setqueuepropertiesfromuser, setqueuepropertiesfromcriu was missed. Thus, setqueuepropertiesfromcriu is not filling out the...
DEBIAN-CVE-2026-98905
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When kfdqueueacquirebuffers was split off from setqueuepropertiesfromuser, setqueuepropertiesfromcriu was missed. Thus, setqueuepropertiesfromcriu is not filling out the...
UBUNTU-CVE-2026-98905
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When kfdqueueacquirebuffers was split off from setqueuepropertiesfromuser, setqueuepropertiesfromcriu was missed. Thus, setqueuepropertiesfromcriu is not filling out the...
CVE-2026-98905
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When kfdqueueacquirebuffers was split off from setqueuepropertiesfromuser, setqueuepropertiesfromcriu was missed. Thus, setqueuepropertiesfromcriu is not filling out the...
CVE-2026-98910
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unwind debug trap enable on copytouser failure If kfddbgtrapenable fails while copying runtimeinfo to userspace, it had already activated the trap, set debugtrapenabled, taken an extra process reference, and opened th...
UBUNTU-CVE-2026-98910
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unwind debug trap enable on copytouser failure If kfddbgtrapenable fails while copying runtimeinfo to userspace, it had already activated the trap, set debugtrapenabled, taken an extra process reference, and opened th...