Lucene search
+L

10146 matches found

OSV
OSV
•added 2026/08/10 12:01 p.m.•20 views

CVE-2026-68260 drm/imagination: acquire vm_ctx->lock before mapping memory to GPU VM

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vmctx-lock before mapping memory to GPU VM The drm gpuvm code doesn't protect find operation against map operation, and the driver needs to ensure a map operation shouldn't happen when a find operation is...

7.8CVSS5.4AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2026/08/10 12:01 p.m.•39 views

CVE-2026-68260 drm/imagination: acquire vm_ctx->lock before mapping memory to GPU VM

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vmctx-lock before mapping memory to GPU VM The drm gpuvm code doesn't protect find operation against map operation, and the driver needs to ensure a map operation shouldn't happen when a find operation is...

7.8CVSS0.00175EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/10 12:01 p.m.•11 views

EUVD-2026-55360

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds in allocateeventnotificationslot The valid event ids go from 0 to KFDSIGNALEVENTLIMIT allocateeventnotificationslot has an option to specify an event id to allocate at, used by CRIU. We weren't checking t...

5.3AI score0.00215EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/08/10 12:01 p.m.•9 views

CVE-2026-68258

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size We weren't checking whether the values provided in the private data in kfd CRIU restore were within bounds. For queue type, add a KFDQUEUETYPEMAX and ensure the...

7.1CVSS5.3AI score0.00164EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2026/08/10 12:01 p.m.•15 views

EUVD-2026-55359

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size We weren't checking whether the values provided in the private data in kfd CRIU restore were within bounds. For queue type, add a KFDQUEUETYPEMAX and ensure the...

5.3AI score0.00164EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/10 12:01 p.m.•23 views

CVE-2026-68258 drm/amdkfd: Check bounds on CRIU restore queue type and mqd size

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size We weren't checking whether the values provided in the private data in kfd CRIU restore were within bounds. For queue type, add a KFDQUEUETYPEMAX and ensure the...

7.1CVSS5.3AI score
SaveExploits0References6
CVE
CVE
•added 2026/08/10 12:01 p.m.•62 views

CVE-2026-68257

The CVE-2026-68257 vulnerability affects the Linux kernel drm/amdkfd component where a 32-bit overflow in the CWSR total size calculation could yield an undersized BO/SVM allocation. The root cause is that total_cwsr_size was computed in 32-bit before being used, and large ctx_save_restore_area_s...

7.8CVSS5.3AI score0.00175EPSS
SaveExploits0References4
CVE
CVE
•added 2026/08/10 12:01 p.m.•53 views

CVE-2026-68256

Summary: CVE-2026-68256 affects the Linux kernel DRM/AMD Display stack, specifically the function detect_link_and_local_sink. The issue: on the DP alt mode timeout path inside SIGNAL_TYPE_DISPLAY_PORT, prev_sink is not released, whereas all other paths correctly call dc_sink_release(prev_sink). T...

5.3AI score0.00209EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/10 12:01 p.m.•9 views

CVE-2026-68256 drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: detectlinkandlocalsink: DP alt mode timeout path leaks prevsink reference prevsink is unconditionally retained via dcsinkretain at function entry, but the DP alt mode timeout path inside SIGNALTYPEDISPLAYPORT...

5.4AI score
SaveExploits0References8
EUVD
EUVD
•added 2026/08/10 12:01 p.m.•14 views

EUVD-2026-55357

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: detectlinkandlocalsink: DP alt mode timeout path leaks prevsink reference prevsink is unconditionally retained via dcsinkretain at function entry, but the DP alt mode timeout path inside SIGNALTYPEDISPLAYPORT...

5.3AI score0.00209EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/10 12:01 p.m.•94 views

CVE-2026-68254 drm/i915/vrr: require valid min/max vfreq for VRR

In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: require valid min/max vfreq for VRR Ensure the EDID provided min/max vfreq are valid. Most scenarios are already covered by coincidence through the checks in intelvrriscapable and intelvrrisinrange, but be more...

5.4AI score
SaveExploits0References10
EUVD
EUVD
•added 2026/08/10 12:01 p.m.•13 views

EUVD-2026-55354

In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: check streams bounds before overflow The data-streams overflow check is done after the buffer overflow has already happened. Move the overflow check before the write. Side note, emitting a warning splat with a...

5.6AI score0.0019EPSS
SaveExploits0References5
CVE
CVE
•added 2026/08/10 12:01 p.m.•87 views

CVE-2026-68253

CVE-2026-68253 affects the Linux kernel’s drm/i915/hdcp component. The issue arises because the check for streams[] bounds is performed after a potential buffer overflow has already occurred during a write, allowing memory corruption. The fix moves the overflow bound check before the write, preve...

7.8CVSS5.6AI score0.0019EPSS
SaveExploits0References7
OSV
OSV
•added 2026/08/10 12:01 p.m.•15 views

CVE-2026-68253 drm/i915/hdcp: check streams[] bounds before overflow

In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: check streams bounds before overflow The data-streams overflow check is done after the buffer overflow has already happened. Move the overflow check before the write. Side note, emitting a warning splat with a...

7.8CVSS5.6AI score
SaveExploits0References10
attackerkb
attackerkb
•added 2026/08/10 12:01 p.m.•16 views

CVE-2026-68252

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma7.0: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit 9723a8bed3aa251a26bee4583bac9d8fb064dd44...

5.4AI score0.00209EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2026/08/10 12:01 p.m.•68 views

CVE-2026-68252

The CVE affects the Linux kernel’s DRM AMDGPU SDMA7.0 code path, where the vulnerable usage was a BUG_ON() that could crash the kernel. It has been fixed by replacing BUG_ON() with WARN_ON(), indicating that such checks should warn rather than crash. Affected component: drm/amdgpu/sdma7.0. Root c...

5.3AI score0.00209EPSS
SaveExploits0References4
OSV
OSV
•added 2026/08/10 12:01 p.m.•14 views

CVE-2026-68248 drm/i915: Return NULL on error in active_instance

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Return NULL on error in activeinstance Avoid returning &node-base when node is NULL due to OOM during GFPATOMIC allocation. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry picked...

5.3AI score
SaveExploits0References10
CVE
CVE
•added 2026/08/10 12:01 p.m.•63 views

CVE-2026-68248

CVE-2026-68248 affects the Linux kernel DRM/i915 driver. The vulnerability arises in the active_instance error path where a NULL node could be used, due to OOM during GFP_ATOMIC allocation, leading to unsafe return of a pointer. The fix modifies the path to return NULL on error instead of derefer...

5.3AI score0.00215EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/08/10 12:01 p.m.•13 views

EUVD-2026-55348

In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: range check LFP Data Block paneltype2 While the paneltype from LFP Data Block is range checked, paneltype2 is not. Add a few helpers for range checking, and use them to not only check paneltype2, but also improve...

5.3AI score0.00209EPSS
SaveExploits0References4
OSV
OSV
•added 2026/08/10 12:01 p.m.•13 views

CVE-2026-68247 drm/i915/bios: range check LFP Data Block panel_type2

In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: range check LFP Data Block paneltype2 While the paneltype from LFP Data Block is range checked, paneltype2 is not. Add a few helpers for range checking, and use them to not only check paneltype2, but also improve...

5.4AI score
SaveExploits0References7
Rows per page
Query Builder