CVE-2025-37903

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix slab-use-after-free in hdcp The HDCP code in amdgpudmhdcp.c copies pointers to amdgpudmconnector objects without incrementing the kref reference counts. When using a USB-C dock, and the dock is unplugged, the...

UBUNTU-CVE-2025-37903

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix slab-use-after-free in hdcp The HDCP code in amdgpudmhdcp.c copies pointers to amdgpudmconnector objects without incrementing the kref reference counts. When using a USB-C dock, and the dock is unplugged, the...

CVE-2025-37903

The CVE-2025-37903 issue affects the Linux kernel DRM/AMD display path (drm/amd/display) in the amdgpu_dm_hdcp.c handling. The root cause is that the HDCP code copies pointers to amdgpu_dm_connector objects without incrementing their kref reference counts. In a USB‑C dock scenario, unplugging fre...

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2021-47659: drm/plane: Move range check for formatcount earlier bsc1237839. CVE-2022-49044: dm integrity: fix memory corruption when tagsize is less than digest si...

CLSA-2025-1747725447 kernel: Fix of 35 CVEs

ext4: fix OOB read when checking dotdot dir CVE-2025-37785 - wifi: iwlwifi: limit printed string from FW file CVE-2025-21905 - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpudiscoveryregbaseinit' CVE-2024-27042 - dm-crypt: don't modify the data when using authenticated encryption...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the amdgpudmhdcp module not properly managing amdgpudmconnector object references, which could lead to reuse...

AMDGPU Kernel Heap Buffer Overflow DoS

The vulnerability in the drivers/gpu/drm/amd/amdgpu/gmcv120.c driver of the AMDGPU core in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

amdgpu_ttm_clear_buffer Heap Buffer Overflow DoS

The vulnerability of the amdgputtmclearbuffer function in the AMDGPU kernel driver for the Linux operating system is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

CLSA-2025-1747430081 Fix of 50 CVEs

CVE-url: https://ubuntu.com/security/CVE-2021-47352 - virtio-net: Add validation for used length CVE-url: https://ubuntu.com/security/CVE-2024-46745 - Input: uinput - reject requests with unreasonable number of slots CVE-url: https://ubuntu.com/security/CVE-2024-44952 - driver core: Fix ueventsho...

CLSA-2025-1747430034 Fix of 54 CVEs

Bionic update: upstream stable patchset 2022-04-13 LP: 1968932 // CVE- url: https://ubuntu.com/security/CVE-2022-23041 - xen/gnttab: fix gnttabendforeignaccess without page specified Bionic update: upstream stable patchset 2023-01-20 LP: 2003596 // CVE- url:...

kernel: drm/amdgpu: add list empty check to avoid null pointer issue

A flaw was found in the Linux kernel's drm/amdgpu component. A missing list empty check in certain scenarios can lead to a null pointer dereference. This vulnerability could allow a local attacker to cause a system crash, resulting in a denial of service...

kernel: drm/amd: Guard against bad data for ATIF ACPI method

A flaw was found in the Linux kernel's drm/amd graphics driver. If a system's BIOS Basic Input/Output System provides malformed data in response to an ATIF AMD Thermal and Interrupt Function ACPI Advanced Configuration and Power Interface method call, it can lead to a NULL pointer dereference. Th...

kernel: drm/amdgpu: fix usage slab after free

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix usage slab after free +0.000021 BUG: KASAN: slab-use-after-free in drmschedentityflush+0x6cb/0x7a0 gpusched +0.000027 Read of size 8 at addr ffff8881b8605f88 by task amdpciunplug/2147 +0.000023 CPU: 6 PID: 2147...

kernel: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported

A flaw was found in the Linux kernel's AMD GPU driver. A failure to properly handle error returns during ACPI Advanced Configuration and Power Interface object evaluation can result in a NULL pointer dereference when specific interface features are unsupported. A local user could exploit this fla...

kernel: drm/amdgpu: Fix the warning division or modulo by zero

A flaw was found in the Linux kernel's amdgpu graphics driver. A local attacker could exploit a division by zero error by triggering an invalid partition mode. This could lead to a system crash, resulting in a Denial of Service DoS...

kernel: drm/amdgpu: the warning dereferencing obj for nbio_v7_4

A flaw was found in the Linux kernel's drm/amdgpu component. A local attacker with low privileges could trigger a null pointer dereference by interacting with the nbiov74 functionality when the rasmanager object is null. This could lead to a system crash, resulting in a denial of service...

kernel: drm/amdgpu/vcn: remove irq disabling in vcn 5 suspend

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: remove irq disabling in vcn 5 suspend We do not directly enable/disable VCN IRQ in vcn 5.0.0. And we do not handle the IRQ state as well. So the calls to disable IRQ and set state are removed. This effectively get...

kernel: drm/amdgpu: Fix smatch static checker warning

A flaw was found in the drm/amdgpu driver of the Linux kernel. A local attacker could exploit this vulnerability by triggering a null pointer dereference. This could lead to a system crash, causing a denial of service DoS on the affected system...

kernel: drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()

A flaw was found in the Linux kernel's AMD GPU driver. A local user with administrative privileges could trigger a buffer overflow by requesting an oversized read operation through the debugfs interface. This vulnerability could lead to memory corruption, potentially causing a system crash and...

kernel: drm/amdgpu: Fix out-of-bounds write warning

A flaw was found in the drm/amdgpu component of the Linux kernel. This out-of-bounds write vulnerability occurs due to an improper check of the ring type value. A local attacker with high privileges could exploit this flaw to cause data corruption, system instability, or potentially achieve...