CVE-2026-68249

A flaw was found in the Linux kernel's drm/amdgpu/sdma5.0 component. This issue occurs when certain conditions trigger a BUGON macro, which is designed to halt system execution upon detecting a critical error. A local attacker could exploit this to cause a kernel crash, leading to a denial of...

CVE-2026-68272

A flaw was found in the Linux kernel's drm/amdgpu component. An unprivileged local attacker can exploit this vulnerability by submitting a specially crafted command with a zero-length chunk size for CPGFXSHADOW. This leads to improper memory access within the kernel, causing a system crash and a...

CVE-2026-68238

A flaw was found in the drm/amdgpu component of the Linux kernel. The amdgpuacpivfctbios function fails to release a reference to the VFCT ACPI table after fetching it. This oversight leads to a resource leak, where memory allocated for the table mapping is not properly freed, potentially impacti...

CVE-2026-68250

A flaw was found in the drm/amdgpu/sdma5.2 component of the Linux kernel. A local attacker could potentially trigger a condition that would previously lead to a kernel panic due to a BUGON macro. This vulnerability could result in a system-wide Denial of Service DoS, making the system unresponsiv...

CVE-2026-68273

A flaw was found in the Linux kernel's amdgpu graphics driver. Improper handling of context pstate overrides can lead to use-after-free and NULL pointer dereferences during context initialization and finalization. A local attacker could exploit this vulnerability to cause system instability or a...

CVE-2026-68103

A flaw was found in the drm/amdgpu component of the Linux kernel. A local attacker could exploit a vulnerability where creating a user-queue with specific parameters overwrites an existing doorbell mapping. This could lead to misrouting of interrupt requests IRQs and incorrect cleanup processes,...

CVE-2026-68234

A flaw was found in the Linux kernel's drm/amdgpu component. The amdgpubocreatereserved function unconditionally increments a pin counter for a Buffer Object BO even if it is already pinned. This occurs when the function is called multiple times with the same BO, such as during firmware buffer...

CVE-2026-68101

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. During the allocation or deallocation of a user pointer buffer object, a critical reference to its virtual memory object can become unavailable. This improper handling of memory submissions could lead to system instability or a denial ...

CVE-2026-68245

A flaw was found in the drm/amdgpu component of the Linux kernel. A use-after-unlock vulnerability exists where a virtual machine VM pointer is dereferenced after its protective lock has been released. This allows the pointer to be modified, potentially leading to memory corruption. An attacker...

CVE-2026-68109

A flaw was found in the Linux kernel, specifically within the drm/amdgpu/sdma7.1 component. This vulnerability occurs when a BUGON macro is triggered, which can lead to an immediate kernel crash. An attacker could potentially exploit this to cause a Denial of Service DoS on the affected system...

drm/amdgpu: Fix kernel panic during driver load failure

...

drm/amdgpu: fix aperture mapping leak

...

drm/amdgpu: reject mapping a reserved doorbell to a new queue

...

drm/amdgpu/vcn4: avoid rereading IB param length

...

drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON()

...

drm/amdgpu/vce: fix integer overflow in image size

...

drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()

...

drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1

...

drm/amdgpu: invoke pm_genpd_remove() before freeing genpd

...

DEBIAN-CVE-2026-68275

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check amdgpuvmbofind result in GETMAPPINGINFO The AMDGPUGEMOPGETMAPPINGINFO path of amdgpugemopioctl looks up the bova for the buffer object in the caller's VM via amdgpuvmbofind, but uses the returned pointer without...