Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add vblank register/unregister callback functions We encountered a kernel panic issue wherein callback data becomes NULL when used by the ovl IRQ handler. There is a timing issue between mtkdispovlirqhandler and...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

A race condition was found in the Linux kernel’s DRM/Exynos device driver within the exynosdrmcrtcatomicdisable function. This may lead to a null pointer dereference issue, potentially resulting in a kernel panic or denial of service...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fixed a null pointer crash in mtkdrmcrtcfinishpageflip. It is possible that mtkcrtc-event is NULL in mtkdrmcrtcfinishpageflip. The pendingneedsvblank value is set by mtkcrtc-event, but in mtkdrmcrtcatomicFlush, it...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers The return value of drmatomicgetcrtcstate needs to be checked. To avoid using the error pointer ‘crtcstate’ in case of a failure...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers in stihqvdpatomiccheck The return value of drmatomicgetcrtcstate needs to be checked. To avoid using the error pointer ‘crtcstate’ in case of a failure...

AZL-102332 CVE-2026-90297 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: crtc: Propagate layer initialization error sun4icrtcinit returns plain NULL when layer initialization fails, while all its other error paths return an error pointer. The only caller, sun4itconbind, checks the result wi...

CVE-2026-90297

CVE-2026-90297 is a null pointer dereference (kernel oops) in the Linux kernel's drm/sun4i driver (Allwinner). The function sun4i_crtc_init() returns plain NULL when layer initialization fails, while its other error paths return an error pointer. Its sole caller, sun4i_tcon_bind(), checks the res...

PT-2026-94971

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A dangling pointer issue exists in the CRTC reset function. The function amdgpu dm crtc reset state frees the old state before attempting to allocate a new one. If the kzalloc function...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: vop: Fixed a warning regarding dereference of a variable before checking it. The ‘state’ parameter cannot be NULL; we should check crtcstate accordingly. Fixed the warning:...

SUSE CVE-2026-72452

In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after dropping refs intelcrtcputcolorblobs drops the CRTC color blob references, but leaves the corresponding pointers unchanged. This can matter in intelcrtcprepareclearedstate, which fre...

SUSE CVE-2026-72313

In the Linux kernel, the following vulnerability has been resolved: drm/fb-helper: Only consider active CRTCs for vblank sync Only synchronize fbdev output to the vblank of an active CRTC. Go over the list of CRTCs and pick the first that matches. Fixes warnings as the one shown below 77.201354...

PT-2026-83000

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vmw external bo copy function within the drm/vmwgfx component. The function fails to properly validate caller-supplied offsets, strides, and heights when operating...

CVE-2026-80542

CVE-2026-80542 is a NULL pointer dereference in the Linux kernel's AMD GPU display driver (drm/amd/amdgpu). The vulnerable function amdgpu_dm_crtc_set_vblank() dereferences acrtc_state->stream before a stream is attached to the CRTC, causing a kernel crash at address 0x8 when vblank is enabled...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: drm/fb-helper: Only consider active CRTCs for vblank sync Only synchronize fbdev output to the vblank of an active CRTC. Go over the list of CRTCs and select the first that matches. Fix the warnings as shown below. 77.201354...

ROS-20260821-73-0033

The vulnerability of the exynosdrmcrtcatomicdisable function in the drivers/gpu/drm/exynos/exynosdrmcrtc.c driver of the Samsung SoC Exynos Linux kernel is related to the assignment of a null pointer due to concurrent access to resources race condition. Exploiting this vulnerability can allow an...

CVE-2026-72452

A flaw was found in the drm/i915 component of the Linux kernel. The intelcrtcputcolorblobs function drops references to CRTC color blobs but does not clear the corresponding pointers. This can lead to a double-free vulnerability if the intelcrtcfreehwstate function is called multiple times for th...

CVE-2026-72313

A flaw was found in the Linux kernel's display rendering manager DRM framebuffer helper drm/fb-helper. This vulnerability arises from incorrect synchronization with display controllers CRTCs, where the system attempts to synchronize with an inactive controller. This can lead to display timeouts a...

Linux Distros Unpatched Vulnerability : CVE-2026-72313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/fb-helper: Only consider active CRTCs for vblank sync Only synchronize fbdev output to t...

Linux Distros Unpatched Vulnerability : CVE-2026-72452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after dropping refs intelcrtcputcolorblobs drops th...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100153)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100153 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fix a possible null pointer dereference In tegracrtcreset, new memory is allocated wit...