Lucene search
+L

9042 matches found

OSV
OSV
added 2026/08/15 6:22 a.m.9 views

UBUNTU-CVE-2026-72386

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced A group ref is tied to the pending tileroomwork, so we need to release it if the cancel was effective...

5.4AI score0.002EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/15 6:22 a.m.8 views

UBUNTU-CVE-2026-72360

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don't attempt to process FASTREQ or EVENT relays Currently defined VF/PF relay actions use regular REQUEST messages only and the PF shouldn't attempt to handle FASTREQUEST nor EVENT messages as this would result in...

8.4CVSS5.4AI score0.00171EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/08/15 6:22 a.m.18 views

CVE-2026-72359

In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix NPD in bomeminfo When a buffer object is purged, its ttm.resource is set to NULL via the TTM pipeline gutting flow. However, the BO remains in the client's object list until userspace explicitly closes the GEM handle...

5.9AI score0.00198EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/08/15 6:22 a.m.17 views

CVE-2026-72361

In the Linux kernel, the following vulnerability has been resolved: drm/xe/hwengine: Fix double-free of managed BO in error path The error path in hwengineinit explicitly frees a BO allocated with xemanagedbocreatepinmap via xebounpinmapnovm. Since the managed BO already has a devm cleanup action...

5.4AI score0.00209EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/08/15 6:22 a.m.15 views

CVE-2026-72362

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Fix NULL pointer dereference in xeptzapptesentry The page-table walk framework may pass a NULL child pointer for unpopulated entries. xeptzapptesentry called containerofchild before checking for NULL, then dereferenced...

5.5AI score0.002EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/08/15 6:21 a.m.13 views

CVE-2026-72091

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject user command submission without a command BO amdxdnadrmsubmitexecbuf passes the user-supplied command BO handle straight into amdxdnacmdsubmit with drvcmd == NULL. When the handle is AMDXDNAINVALIDBOHANDLE 0...

5.6AI score0.00198EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/15 6:21 a.m.14 views

UBUNTU-CVE-2026-72091

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject user command submission without a command BO amdxdnadrmsubmitexecbuf passes the user-supplied command BO handle straight into amdxdnacmdsubmit with drvcmd == NULL. When the handle is AMDXDNAINVALIDBOHANDLE 0...

5.5AI score0.00198EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/15 5:59 a.m.32 views

CVE-2026-74421 drm/rockchip: dw_dp: Switch to drmm_kzalloc()

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dwdp: Switch to drmmkzalloc Driver makes use of drmmencoderinit to initialize the encoder and automatically handle the cleanup by registering drmencodercleanup with drmmaddaction. However, the internal structure...

0.00155EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/15 5:59 a.m.10 views

EUVD-2026-59569

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: inno-hdmi: Switch to drmmkzalloc Driver makes use of drmmencoderinit to initialize the encoder and automatically handle the cleanup by registering drmencodercleanup with drmmaddaction. However, the internal structur...

5.5AI score0.00145EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/15 5:59 a.m.33 views

CVE-2026-74422 drm/rockchip: inno-hdmi: Switch to drmm_kzalloc()

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: inno-hdmi: Switch to drmmkzalloc Driver makes use of drmmencoderinit to initialize the encoder and automatically handle the cleanup by registering drmencodercleanup with drmmaddaction. However, the internal structur...

5.6AI score
SaveExploits0References5
CVE
CVE
added 2026/08/15 5:59 a.m.40 views

CVE-2026-74421

CVE-2026-74421 affects the Linux kernel drm/rockchip driver, specifically the dw_dp encoder path. The encoder structure was allocated with devm_kzalloc() during component_bind_all(), while cleanup is triggered via drmm_encoder_cleanup() on drm_encoder_cleanup() registered through drmm_add_action(...

5.4AI score0.00155EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/15 5:59 a.m.44 views

CVE-2026-74422

In CVE-2026-74422, the Linux kernel’s drm/rockchip inno-hdmi encoder uses a device-managed allocation (devm_kzalloc) for its internal structure during component_bind_all. When the DRM device reference is dropped (drm_dev_put) and drmm_encoder_alloc_release runs, the encoder structure may have bee...

5.4AI score0.00145EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/15 5:59 a.m.37 views

CVE-2026-74422 drm/rockchip: inno-hdmi: Switch to drmm_kzalloc()

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: inno-hdmi: Switch to drmmkzalloc Driver makes use of drmmencoderinit to initialize the encoder and automatically handle the cleanup by registering drmencodercleanup with drmmaddaction. However, the internal structur...

0.00145EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/15 5:59 a.m.24 views

EUVD-2026-59568

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dwdp: Switch to drmmkzalloc Driver makes use of drmmencoderinit to initialize the encoder and automatically handle the cleanup by registering drmencodercleanup with drmmaddaction. However, the internal structure...

5.5AI score0.00155EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/15 5:59 a.m.26 views

CVE-2026-74421 drm/rockchip: dw_dp: Switch to drmm_kzalloc()

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dwdp: Switch to drmmkzalloc Driver makes use of drmmencoderinit to initialize the encoder and automatically handle the cleanup by registering drmencodercleanup with drmmaddaction. However, the internal structure...

5.6AI score
SaveExploits0References6
OSV
OSV
added 2026/08/15 5:59 a.m.22 views

CVE-2026-74420 drm/gpusvm: Reject VMAs with VM_IO or VM_PFNMAP when creating SVM ranges

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Reject VMAs with VMIO or VMPFNMAP when creating SVM ranges VMAs marked with VMIO or VMPFNMAP are not backed by struct page objects, which GPUSVM requires in order to operate correctly. In particular, getpages relies o...

5.6AI score
SaveExploits0References6
CVE
CVE
added 2026/08/15 5:59 a.m.42 views

CVE-2026-74420

CVE-2026-74420 is a Linux kernel issue in drm/gpusvm. The vulnerability occurs when creating SVM ranges on VMAs marked VM_IO or VM_PFNMAP, which are not backed by struct page objects that GPUSVM relies on. As a result, get_pages() may fail repeatedly and cause an infinite loop inside a driver’s p...

5.4AI score0.00155EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/15 5:59 a.m.17 views

EUVD-2026-59567

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Reject VMAs with VMIO or VMPFNMAP when creating SVM ranges VMAs marked with VMIO or VMPFNMAP are not backed by struct page objects, which GPUSVM requires in order to operate correctly. In particular, getpages relies o...

5.5AI score0.00155EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/15 5:59 a.m.53 views

CVE-2026-74417

CVE-2026-74417 affects the Linux kernel DRM/Radeon path, specifically the radeon_align_pitch() routine. The issue is an integer overflow in the alignment round-up and the final pitch calculation that can yield an invalid pitch or a zero-sized dumb buffer in radeon_mode_dumb_create(). The fix intr...

7.8CVSS5.4AI score0.0012EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/15 5:59 a.m.34 views

CVE-2026-74416 drm/radeon: fix memory leak in radeon_ring_restore() on lock failure

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix memory leak in radeonringrestore on lock failure radeonringrestore takes ownership of the data buffer allocated by radeonringbackup. The caller radeongpureset only frees it in the non-restore branch; in the restor...

5.9AI score
SaveExploits0References11
Rows per page
Query Builder