UBUNTU-CVE-2023-54138

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix NULL-deref on irq uninstall In case of early initialisation errors and on platforms that do not use the DPU controller, the deinitilisation code can be called with the kms pointer set to NULL. Patchwork:...

CVE-2023-54091

In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drmclienttargetcloned dmtmode is allocated and never freed in this function. It was found with the ast driver, but most drivers using generic fbdev setup are probably affected. This fixes the...

CVE-2023-54122

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add check for cstate As kzalloc may fail and return NULL pointer, it should be better to check cstate in order to avoid the NULL pointer dereference in drmatomichelpercrtcreset. Patchwork:...

UBUNTU-CVE-2025-68735

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Prevent potential UAF in group creation This commit prevents the possibility of a use after free issue in the GROUPCREATE ioctl function, which arose as pointer to the group is accessed in that ioctl function after...

CVE-2022-50718

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix pci device refcount leak As comment of pcigetdomainbusandslot says, it returns a pci device with refcount increment, when finish using it, the caller must decrement the reference count by calling pcidevput. So...

CVE-2023-54150

Technical details for CVE-2023-54150 are not publicly available in the provided documents. No connected entries specify affected products/versions or fixes beyond the initial description; monitor for updates from vendors.

CVE-2023-54138 drm/msm: fix NULL-deref on irq uninstall

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix NULL-deref on irq uninstall In case of early initialisation errors and on platforms that do not use the DPU controller, the deinitilisation code can be called with the kms pointer set to NULL. Patchwork:...

CVE-2023-54138

Technical details for CVE-2023-54138 (drm/msm NULL-deref on irq uninstall) are not provided in the connected documents. Monitor for updates; no product/version/fix information is included here.

CVE-2023-54138 drm/msm: fix NULL-deref on irq uninstall

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix NULL-deref on irq uninstall In case of early initialisation errors and on platforms that do not use the DPU controller, the deinitilisation code can be called with the kms pointer set to NULL. Patchwork:...

CVE-2023-54122

The CVE-2023-54122 issue affects the Linux kernel’s DRM MSM DPU path. A kzalloc failure can yield NULL when constructing cstate, risking a NULL pointer dereference in __drm_atomic_helper_crtc_reset. The publicly described fix adds a check for cstate before use to prevent dereferencing a NULL poin...

CVE-2023-54122 drm/msm/dpu: Add check for cstate

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add check for cstate As kzalloc may fail and return NULL pointer, it should be better to check cstate in order to avoid the NULL pointer dereference in drmatomichelpercrtcreset. Patchwork:...

CVE-2023-54116

CVE-2023-54116 targets the Linux kernel’s DRM fbdev path (drm_fb_helper_memory_range_to_clip) where fbdev tests may write past EOF, causing out-of-bounds accesses and kernel hangs. The root cause is unsafe damage-rectangle computation: buffers are page-size aligned and the DIV_ROUND_UP usage can ...

CVE-2023-54091 drm/client: Fix memory leak in drm_client_target_cloned

In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drmclienttargetcloned dmtmode is allocated and never freed in this function. It was found with the ast driver, but most drivers using generic fbdev setup are probably affected. This fixes the...

CVE-2023-54091

CVE-2023-54091 in the Linux kernel fixes a memory leak in drm/client_target_cloned where dmt_mode is allocated but not freed. The KMEMLEAK backtrace indicates this may affect drivers using generic fbdev (notably the ast driver). The vulnerability is resolved by kernel fixes in the DRM subsystem; ...

CVE-2023-54091 drm/client: Fix memory leak in drm_client_target_cloned

In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drmclienttargetcloned dmtmode is allocated and never freed in this function. It was found with the ast driver, but most drivers using generic fbdev setup are probably affected. This fixes the...

CVE-2022-50750

CVE-2022-50750 affects the Linux kernel: specifically the DRM SITRONIX ST7701 panel driver. The issue arises when a MIPI DSI attach fails, and the driver does not properly handle cleanup, risking a memory leak if mipi_dsi_attach() fails. The provided documents confirm the fix was implemented as p...

CVE-2022-50750 drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure

In the Linux kernel, the following vulnerability has been resolved: drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure In case mipidsiattach fails, call drmpanelremove to avoid memory leak...

CVE-2025-68749

CVE-2025-68749 relates to the Linux kernel’s acceleration subsystem (ivpu) and a race condition when unbinding BOs. The issue could permit improper unmapping timing during context teardown because a BO might be removed from the BOs list before unmapping completes. The connected Astra Linux bullet...

CVE-2025-68747 drm/panthor: Fix UAF on kernel BO VA nodes

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF on kernel BO VA nodes If the MMU is down, panthorvmunmaprange might return an error. We expect the page table to be updated still, and if the MMU is blocked, the rest of the GPU should be blocked too, so no...

CVE-2025-68747 drm/panthor: Fix UAF on kernel BO VA nodes

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF on kernel BO VA nodes If the MMU is down, panthorvmunmaprange might return an error. We expect the page table to be updated still, and if the MMU is blocked, the rest of the GPU should be blocked too, so no...