7845 matches found
UBUNTU-CVE-2023-53833
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix NULL ptr deref by checking newcrtcstate intelatomicgetnewcrtcstate can return NULL, unless crtc state wasn't obtained previously with intelatomicgetcrtcstate, so we must check it for NULLness here, just as in many...
UBUNTU-CVE-2025-40340
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix oops in xegemfault when running corehotunplug test. I saw an oops in xegemfault when running the xe-fast-feedback testlist against the realtime kernel without debug options enabled. The panic happens after corehotunpl...
UBUNTU-CVE-2025-40334
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq buffer virtual address and size It needs to validate the userq object virtual address to determine whether it is residented in a valid vm mapping...
UBUNTU-CVE-2025-40335
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq input args This will help on validating the userq input args, and rejecting for the invalid userq request at the IOCTLs first place...
CVE-2025-40340
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix oops in xegemfault when running corehotunplug test. I saw an oops in xegemfault when running the xe-fast-feedback testlist against the realtime kernel without debug options enabled. The panic happens after corehotunpl...
CVE-2025-40339
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix nullptr err of vmhandlemoved If a amdgpubova is fpriv-prtva, the bo of this one is always NULL. So, such kind of amdgpubova should be updated separately before amdgpuvmhandlemoved...
CVE-2025-40336
Vulnerability summary: CVE-2025-40336 affects the Linux kernel DRM/GPU virtualization path (drm/gpusvm). The root cause is incorrect usage of hmm_pfn_to_map_order when a memory range partially covers a huge page (e.g., 2 MiB), which could lead to mapping memory outside the intended range. The pat...
CVE-2025-40334
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq buffer virtual address and size It needs to validate the userq object virtual address to determine whether it is residented in a valid vm mapping...
CVE-2025-40334 drm/amdgpu: validate userq buffer virtual address and size
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq buffer virtual address and size It needs to validate the userq object virtual address to determine whether it is residented in a valid vm mapping...
CVE-2025-40334 drm/amdgpu: validate userq buffer virtual address and size
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq buffer virtual address and size It needs to validate the userq object virtual address to determine whether it is residented in a valid vm mapping...
CVE-2025-40335 drm/amdgpu: validate userq input args
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq input args This will help on validating the userq input args, and rejecting for the invalid userq request at the IOCTLs first place...
CVE-2025-40335
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq input args This will help on validating the userq input args, and rejecting for the invalid userq request at the IOCTLs first place...
CVE-2025-40332 drm/amdkfd: Fix mmap write lock not release
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix mmap write lock not release If mmap write lock is taken while draining retry fault, mmap write lock is not released because svmrangerestorepages calls mmapreadunlock then returns. This causes deadlock and system...
CVE-2025-40329
The CVE-2025-40329 entry documents a deadlock in the Linux kernel’s DRM scheduler, specifically in drm_sched_entity_kill_jobs_cb. The issue arises when a fence callback (executed in interrupt context) tries to acquire dma_fence/additional locks while another CPU holds xa_lock, creating a potentia...
CVE-2025-40329 drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb
In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix deadlock in drmschedentitykilljobscb The Mesa issue referenced below pointed out a possible deadlock: 1231.611031 Possible interrupt unsafe locking scenario: 1231.611033 CPU0 CPU1 1231.611034 ---- ---- 1231.611035...
CVE-2025-40329
In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix deadlock in drmschedentitykilljobscb The Mesa issue referenced below pointed out a possible deadlock: 1231.611031 Possible interrupt unsafe locking scenario: 1231.611033 CPU0 CPU1 1231.611034 ---- ---- 1231.611035...
CVE-2025-40329 drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb
In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix deadlock in drmschedentitykilljobscb The Mesa issue referenced below pointed out a possible deadlock: 1231.611031 Possible interrupt unsafe locking scenario: 1231.611033 CPU0 CPU1 1231.611034 ---- ---- 1231.611035...
EUVD-2023-60126
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix FCLK pstate change underflow Why Currently we set FCLK p-state change watermark calculated based on dummy p-state latency when UCLK p-state is not supported How Calculate FCLK p-state change watermark based o...
CVE-2023-53864
In the Linux kernel, the following vulnerability has been resolved: drm/mxsfb: Disable overlay plane in mxsfbplaneoverlayatomicdisable When disabling overlay plane in mxsfbplaneoverlayatomicupdate, overlay plane's framebuffer pointer is NULL. So, dereferencing it would cause a kernel OopsNULL...
CVE-2023-53849
In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix workqueue leak on bind errors Make sure to destroy the workqueue also in case of early errors during bind e.g. a subcomponent failing to bind. Since commit c3b790ea07a1 "drm: Manage drmmodeconfiginit with drmm" the...