PT-2026-83000

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate external BO copy bounds for both stride paths vmw external bo copy trusts caller-supplied offsets, strides, and heights and operates on imported dma-buf vmaps: - The equal-stride memcpy bound was clamped afte...

EUVD-2026-66454

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: disallow multiple FENCE chunks in one submit amdgpucspass1 dispatches on chunkid once per chunk without rejecting repeated ids. p-ufbo is a single-slot field, so a submission carrying two AMDGPUCHUNKIDFENCE chunks run...

AZL-97749 CVE-2026-80539 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: disallow multiple FENCE chunks in one submit amdgpucspass1 dispatches on chunkid once per chunk without rejecting repeated ids. p-ufbo is a single-slot field, so a submission carrying two AMDGPUCHUNKIDFENCE chunks run...

CVE-2026-80539

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: disallow multiple FENCE chunks in one submit amdgpucspass1 dispatches on chunkid once per chunk without rejecting repeated ids. p-ufbo is a single-slot field, so a submission carrying two AMDGPUCHUNKIDFENCE chunks run...

UBUNTU-CVE-2026-80539

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: disallow multiple FENCE chunks in one submit amdgpucspass1 dispatches on chunkid once per chunk without rejecting repeated ids. p-ufbo is a single-slot field, so a submission carrying two AMDGPUCHUNKIDFENCE chunks run...

CVE-2026-80539 drm/amdgpu: disallow multiple FENCE chunks in one submit

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: disallow multiple FENCE chunks in one submit amdgpucspass1 dispatches on chunkid once per chunk without rejecting repeated ids. p-ufbo is a single-slot field, so a submission carrying two AMDGPUCHUNKIDFENCE chunks run...

CVE-2026-80539

CVE-2026-80539 affects the Linux kernel 's drm/amdgpu driver. In amdgpu_cs_pass1(), a user submission carrying multiple AMDGPU_CHUNK_ID_FENCE chunks causes amdgpu_cs_p1_user_fence() to run more than once. Because p->uf_bo is a single-slot field, each subsequent call overwrites it with a newly ...

Linux Distros Unpatched Vulnerability : CVE-2026-80539

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: disallow multiple FENCE chunks in one submit amdgpucspass1 dispatches on chunkid once per chunk without rejecting repeated ids. p-ufbo is a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098971)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098971 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Userspace can pass an...

PT-2026-82157

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where AMDGPU GEM CREATE failed to validate domain combinations. While domain bits were checked against AMDGPU GEM DOMAIN MASK, userspace could...

PT-2026-82155

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where the amdgpu cs pass1 function fails to reject repeated chunk IDs. When a submission contains multiple AMDGPU CHUNK ID FENCE chunks, the...

SUSE CVE-2026-74440

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Wait on external BO kernel fences in exec IOCTL Before arming a user job, xeexecioctl only added the VM's dma-resv KERNEL slot as a dependency. That slot covers rebinds and the kernel operations of the VM's private BOs, b...

PT-2026-81426

Webkul QloApps does not validate request parameters before a database query. A remote, authenticated attacker with administrative privileges could send a crafted SQL query to the 'bo query' parameter in the 'Address.php' file. Fixed in 123c97c...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: accel/amdxdna: Use callerclient for debugging BO sync. amdxdnadrmsyncboioctl looks up args-handle in the drmfile of the ioctl caller. For SYNCDIRECTFROMDEVICE, it then calls amdxdnahwctxsyncdebugbo, but passes abo-client...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe/hwengine: Fixed the double-free of the managed BO in the error path. The error path in hwengineinit explicitly frees a BO allocated through xemanagedbocreatepinmap, using xebounpinmapnovm. Since the managed BO already has ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Invalid indirect BO handle is rejected during indirect CSD setup. The function v3dgetcpuindirectcsdparams looks up the indirect buffer object from a handle provided by the user space. However, it never checks the result....

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Waiting for external BO kernel fences during exec IOCTL operations. Beforearming a user job, the xeexecioctl function only added the VM’s DMARESVUSAGEKERNEL slot as a dependency. This slot covers operations related to the...

SUSE CVE-2026-68233

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Shut down BO cache timer before teardown The BO cache timer callback schedules timework, and timework can rearm the timer through vc4bocachefreeold. vc4bocachedestroy deletes the timer and then cancels the work, which do...

SUSE CVE-2026-68234

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix bo-pin leaking in amdgpubocreatereserved amdgpubocreatereserved only allocates a new BO when boptr struct amdgpubo boptr as input parameter is NULL, it simply skips creation when boptr is non-NULL. But it...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102076)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102076 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Userspace can pass an...