EUVD-2026-117280

In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption...

CVE-2026-69043

The Samsung Exynos GPU driver contains a vulnerability where improper synchronization during the creation and closing of buffer objects can lead to memory corruption . The vulnerability is associated with CWE-416 (Use After Free) . While a specific patch version is not provided in the documentati...

PT-2026-137370

In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption...

CLEANSTART-2024-TE55540 texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information lea...

CVE-2021-23981 affects multiple packages. A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash. See references for individual vulnerability...

CVE-2026-99145

A flaw was found in the Linux kernel's Intel Xe graphics driver drm/xe. A local user could exploit this vulnerability by altering the memory state of a pinned graphics buffer object, causing the driver to unconditionally transfer pages between memory tracking pools. This issue triggers an integer...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unreserve bo if queue update failed The error handling path should unreserve bo and then return a failure. Cherry picked from commit c24afed7de9ecce341825d8ab55a43a254348b33...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/amdgpu: The parameters of bo mapping operations need to be clarified. The parameters of amdgpuvmbomap/replacemap/clearingmappings should be verified in a single common place...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fixed corruption of the shrinker list caused by the madvise IOCTL. Calling the madvise IOCTL twice on BO causes corruption of the memory shrinker list, leading to a kernel crash. This occurs because BO is already on...

CVE-2026-93047 drm/v3d: Associate BOs with every job that accesses them

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Associate BOs with every job that accesses them A submission can expand into a chain of jobs e.g. bin + render + cache clean. Implicit synchronization in v3dsubmitlockreservations is gated on each job's bo, but the BO li...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: drm/nouveau: Avoid a use-after-free when BO init fails nouveauboinit is backed by ttmboinit and passes its return code back to the caller. In case of failures, ttmboinit invokes the provided destructor, which should...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fixed a page fault in ivpubounbindallbosfromcontext...

Astra Linux – Vulnerability in Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fixed the error path in panfrostmmumapfaultaddr Subject: PATCH drm/panfrost: Fixed the error path in panfrostmmumapfaultaddr If some of the page allocations fail, we should not release the previous references to tho...

Astra Linux – Vulnerability in Firefox and Thunderbird

The texture upload of a Pixel Buffer Object could have caused WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash. This vulnerability affects Firefox ESR 78.9, Firefox 87, and Thunderbird 78.9...

SUSE CVE-2026-74381

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Allow entries in BO caches to be freed When a buffer object is pinned via host1xbopin with a cache, the resulting mapping is kept in the cache so it can be reused on subsequent pins. Each mapping held a reference to...

Linux Distros Unpatched Vulnerability : CVE-2026-80618

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free amdgpuamdkfdgpuvmfreememoryofgpu...

SUSE CVE-2026-80618

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free amdgpuamdkfdgpuvmfreememoryofgpu unpinned DOORBELL and MMIO remap BOs which are pinned at allocation time before checking whether the BO is still mapped to the GPU. When...

SUSE CVE-2026-72359

In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix NPD in bomeminfo When a buffer object is purged, its ttm.resource is set to NULL via the TTM pipeline gutting flow. However, the BO remains in the client's object list until userspace explicitly closes the GEM handle...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: GPU: host1x – Allow entries in BO caches to be freed When a buffer object is pinned using host1xbopin, along with a cache, the resulting mapping is kept in the cache so it can be reused in subsequent pinnings. Each mapping holds ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe: fixed NPD in bomeminfo When a buffer object is purged, its ttm.resource is set to NULL via the TTM pipeline. However, the BO remains in the client’s object list until userspace explicitly closes the GEM handle. If memory...

CVE-2026-74381

A flaw was found in the gpu: host1x component of the Linux kernel. When a buffer object is pinned with a cache, a circular reference prevents the buffer object from being freed. This issue can lead to a resource leak, potentially allowing a local attacker to cause a Denial of Service DoS by...