CVE-2026-68111 drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit b71604f8685b0eba07866f4e8dc30f93e1931054...

CVE-2026-68110

The CVE-2026-68110 entry concerns the Linux kernel component drm/amdgpu/sdma4.4.2. The root cause involved using BUG_ON() in code paths where a crash was previously deemed unnecessary; the fix replaces BUG_ON() with WARN_ON(), so kernel crashes are avoided for these cases. The information indicat...

EUVD-2026-55491

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma4.4.2: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit fa4f86a148271e325e95287630a3a15a9cd35fdc...

CVE-2026-68107

The CVE-2026-68107 relates to the Linux kernel’s drm/amdgpu/vcn4 component, where a TOCTOU vulnerability arises from rereading the IB parameter length instead of reusing the value previously obtained. The fix reuses the length returned by vcn_v4_0_enc_find_ib_param() rather than rereading it from...

CVE-2026-68104 drm/amdgpu: invoke pm_genpd_remove() before freeing genpd

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: invoke pmgenpdremove before freeing genpd Call pmgenpdremove to unregister from global list prior to releasing acpgenpd memory, and clear the pointer after free. cherry picked from commit...

EUVD-2026-55484

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: reject mapping a reserved doorbell to a new queue When creating an user-queue, the user space provides a doorbell BO handle and an offset within the bo to obtain a doorbell. However current implementation using...

CVE-2026-68110: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma4.4.2: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit fa4f86a148271e325e95287630a3a15a9cd35fdc...

PT-2026-69510

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/sdma4.4.2 component where the use of the BUG ON function can cause the kernel to crash unnecessarily in certain cases. The BUG ON function is a kernel...

CVE-2026-68107: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by vcnv40encfindibparam instead of rereading it from the IB. This avoids a potential TOCTOU issue if the IB contents change between reads. cherr...

PT-2026-69502

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the amdgpu hmm invalidate gfx function within the drm/amdgpu component. During the allocation or freeing process, a userptr BO Buffer Object may temporarily not be par...

CVE-2026-68102: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix aperture mapping leak amdgpupciremove calls drmdevunplug before invoking the driver fini routines. This causes drmdeventer in amdgputtmfini to always return false, so iounmapaperbasekaddr never runs on normal driv...

Linux Distros Unpatched Vulnerability : CVE-2026-68246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/gfx11: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit...

CVE-2026-68246: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx11: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit daa62107452d2451787c4248ca38fa2d1a0cbefd...

PT-2026-69504

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where the system fails to reject the mapping of a reserved doorbell to a new queue. When creating a user-queue, the user space provides a...

PT-2026-69645

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use after unlock issue exists in the drm/amdgpu component. The vm pointer returned by the amdgpu vm get vm from pasid function is only valid while the lock is held. When xa unlock...

PT-2026-69673

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Issues exist in the context pstate handling code within the drm/amdgpu component. The most critical problems include potential use-after-free and NULL pointer dereferences during context...

CVE-2026-68250: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.2: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit ae658afc7f47f6147371ec42cc6b1a793dfdb5af...

PT-2026-69506

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division by zero occurs in the drm/amdgpu component during H264 and H264 Perf decode paths. This happens when the width or height of a frame is less than 16, causing the width in mb or...

CVE-2026-68106: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix division by zero with invalid uvd dimensions When width or height is less than 16, widthinmb or heightinmb becomes 0, leading to fsinmb being 0. This causes a division by zero when calculating numdpbbuffer in H264...

CVE-2026-68108: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: fix integer overflow in image size Fix a security vulnerability where malicious VCE command streams with oversized dimensions e.g. 65536×65536 cause 32-bit integer overflow, wrapping the calculated buffer size to ...