10136 matches found
CVE-2026-68103
A flaw was found in the drm/amdgpu component of the Linux kernel. A local attacker could exploit a vulnerability where creating a user-queue with specific parameters overwrites an existing doorbell mapping. This could lead to misrouting of interrupt requests IRQs and incorrect cleanup processes,...
CVE-2026-68252
A flaw was found in the drm/amdgpu/sdma7.0 component of the Linux kernel. This vulnerability could lead to a kernel crash, resulting in a Denial of Service DoS. The issue was caused by an improper use of BUGON which has been replaced with WARNON to prevent system instability...
CVE-2026-68264
A flaw was found in the Linux kernel's drm/xe/pt module. During certain memory management operations, an internal counter is not properly reset. Repeated attempts to perform these operations, possibly due to resource contention or out-of-memory conditions, can cause this counter to exceed its...
CVE-2026-68303
A flaw was found in the Linux kernel's drm/vc4 drivers, specifically in the hvs and v3d components. When these drivers are being removed, they attempt to access memory that has already been freed. This occurs because they try to retrieve driver data from a master device that is no longer availabl...
CVE-2026-68236
A flaw was found in the Linux kernel's drm/amd/display component. Specifically, within the dmupdatecrtcstate function, a stream pointer is released but not subsequently set to NULL. This can lead to a double release of the same pointer if an error occurs later in the process, creating a...
CVE-2026-68245
A flaw was found in the drm/amdgpu component of the Linux kernel. A use-after-unlock vulnerability exists where a virtual machine VM pointer is dereferenced after its protective lock has been released. This allows the pointer to be modified, potentially leading to memory corruption. An attacker...
CVE-2026-68266
A flaw was found in the drm/xe component of the Linux kernel. This vulnerability, a use-after-free, occurs because a dma-buf Direct Memory Access Buffer reference is not properly held for imported Buffer Objects BOs. If the exporter of a dma-buf is freed while a BO still references its reservatio...
CVE-2026-68265
A flaw was found in the Linux kernel. Specifically, within the drm/xe/vm module, an out-of-bounds access can occur when handling the DRMXECONSULTMEMADVISEPREFLOC region for a Buffer Object BO Virtual Memory Area VMA. This happens because a value of -1 is incorrectly used as an index into a memory...
CVE-2026-68239
A flaw was found in the Linux kernel's Direct Rendering Manager drm/ttm component. A local attacker could trigger a null pointer dereference by manipulating memory pages in ttmpoolbackup. This vulnerability occurs because the system attempts to process or free memory pages that are either empty...
drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU
...
drm/nouveau: fix reversed error cleanup order in ucopy functions
...
drm/amdgpu: fix aperture mapping leak
...
drm/amdgpu: fix division by zero with invalid uvd dimensions
...
drm/amdgpu: reject mapping a reserved doorbell to a new queue
...
drm/i915/gem: Add missing nospec on parallel submit slot
...
drm/amd/display: set new_stream to NULL after release
...
drm/amdgpu/vcn4: avoid rereading IB param length
...
drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers
...