kernel: drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes

A flaw was found in the Linux kernel’s nouveau module. The return value of the drmmodeduplicate function is not checked in the nouveauconnectorgetmodes function in the drivers/gpu/drm/nouveau/nouveauconnector.c file, possibly causing a NULL pointer dereference and resulting in a denial of service...

kernel: drm/nouveau/firmware: Fix SG_DEBUG error with nvkm_firmware_ctor()

No description is available for this CVE...

kernel: drm/drm_file: Fix pid refcounting race

A race condition was found in the Linux kernel. The rmfileupdatepid only increments the refcount of a struct pid after storing a pointer to it in filp-pid, dropping the dev-filelistmutex, resulting in a use-after-free vulnerability...

kernel: drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: amdgputtmgartbind set gtt bound flag The Linux kernel CVE team has assigned CVE-2024-35817 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051743-CVE-2024-35817-d29b@gregkh/T...

kernel: drm/amd/display: Fix MST Null Ptr for RV

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix MST Null Ptr for RV The change try to fix below error specific to RV platform: BUG: kernel NULL pointer dereference, address: 0000000000000008 PGD 0 P4D 0 Oops: 0000 1 PREEMPT SMP NOPTI CPU: 4 PID: 917 Comm:...

kernel: drm/vmwgfx: Fix the lifetime of the bo cursor memory

A vulnerability was found in the drm/vmwgfx driver in the Linux kernel, concerning the lifetime management of the buffer object BO cursor memory. This issue occurs due to improper handling of the cursor memory's lifecycle, which could lead to use-after-free errors or crashes...

kernel: drm/amd/display: Implement bounds check for stream encoder creation in DCN301

A vulnerability was found in the DRM/AMD/Display module of the Linux Kernel. An out-of-bounds access exists in the 'streamencregs' array within DCN301, while accessing the array with 'engid,’ could lead to an out-of-bounds access beyond its four-element size, which can cause a system crash...

drm/amd/display: fix double free issue during amdgpu module unload

...

drm/amd/display: Initialize get_bytes_per_element's default to 1

...

PT-2025-40759

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the device resource management within the drivers base code. Specifically, device resources are not always freed when a device is unregistered,...

Unbreakable Enterprise kernel security update

5.4.17-2136.337.5 - net/mlx5: disable the 'fast unload' feature on Exadata systems Qing Huang Orabug: 37093177 5.4.17-2136.337.4 - ocfs2: reserve space for inline xattr before attaching reflink tree Gautham Ananthakrishna Orabug: 37199020 - Revert 'ocfs2: ocfs2 crash due to invalid hnextleafblk...

CLSA-2024-1731348593 kernel: Fix of 18 CVEs

mm: call the securitymmapfile LSM hook in remapfilepages CVE-2024-47745 - slip: make slhcremember more robust against malicious packets CVE-2024-50033 - drm/amdkfd: amdkfdfreegttmem clear the correct pointer CVE-2024-49991 - firmwareloader: Block path traversal CVE-2024-47742 - ext4: avoid OOB...

PT-2024-10003

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 6.11.9 Description The issue is related to the dc state copy internal function in the Linux kernel's drm/amd/display module. It concerns a double free vulnerability that occurs when a dml allocation fails, causin...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2024-2888)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2024-50213

In the Linux kernel, the following vulnerability has been resolved: drm/tests: hdmi: Fix memory leaks in drmdisplaymodefromceavic modprobe drmhdmistatehelpertest and then rmmod it, the following memory leak occurs. The mode allocated in drmmodeduplicate called by drmdisplaymodefromceavic is not...

SUSE CVE-2024-50214

In the Linux kernel, the following vulnerability has been resolved: drm/connector: hdmi: Fix memory leak in drmdisplaymodefromceavic modprobe drmconnectortest and then rmmod drmconnectortest, the following memory leak occurs. The mode allocated in drmmodeduplicate called by drmdisplaymodefromceav...

DEBIAN-CVE-2024-50213

In the Linux kernel, the following vulnerability has been resolved: drm/tests: hdmi: Fix memory leaks in drmdisplaymodefromceavic modprobe drmhdmistatehelpertest and then rmmod it, the following memory leak occurs. The mode allocated in drmmodeduplicate called by drmdisplaymodefromceavic is not...

DEBIAN-CVE-2024-50214

In the Linux kernel, the following vulnerability has been resolved: drm/connector: hdmi: Fix memory leak in drmdisplaymodefromceavic modprobe drmconnectortest and then rmmod drmconnectortest, the following memory leak occurs. The mode allocated in drmmodeduplicate called by drmdisplaymodefromceav...

CVE-2024-50214

In the Linux kernel, the following vulnerability has been resolved: drm/connector: hdmi: Fix memory leak in drmdisplaymodefromceavic modprobe drmconnectortest and then rmmod drmconnectortest, the following memory leak occurs. The mode allocated in drmmodeduplicate called by drmdisplaymodefromceav...

UBUNTU-CVE-2024-50214

In the Linux kernel, the following vulnerability has been resolved: drm/connector: hdmi: Fix memory leak in drmdisplaymodefromceavic modprobe drmconnectortest and then rmmod drmconnectortest, the following memory leak occurs. The mode allocated in drmmodeduplicate called by drmdisplaymodefromceav...