CVE-2026-47567

A flaw was found in the NVIDIA GPU display driver. A local user with standard privileges can trigger this vulnerability within the kernel mode layer by exhausting the Direct Rendering Manager DRM virtual memory area VMA offset address space. This uncontrolled resource consumption can lead to a...

CVE-2026-98106

A flaw was found in the Linux kernel's Direct Rendering Manager DRM pagemap component. A race condition during memory migration allows a local user to cause a Denial of Service DoS. When device-private memory is migrated to system memory during a page fault, a timing window permits an eviction...

CVE-2026-89816

A flaw was found in the Linux kernel's Direct Rendering Manager DRM subsystem. This memory leak occurs when a signal is sent to a thread using DRMMODEPAGEFLIPEVENT, specifically when drmcrtccommit is not properly put in drmatomichelpercrtcdestroystate. A local attacker could potentially exploit...

ROS-20260923-73-0052

The vulnerability of the drmschedjobaddresvdependencies function in the drivers/gpu/drm/scheduler/schedmain.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the reallocation of previously released memory. Exploiting this vulnerability could allo...

ROS-20260923-73-0021

The vulnerability of the drmgemfbinitwithfuncs function in the drivers/gpu/drm/drmgemframebufferhelper.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to integer overflow or cyclic shift vulnerabilities. Exploitation of this vulnerability could allow an...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Do not leak a resource during the swapout movement operation. If moving the buffer to the system for swapout failed, we were leaking a resource. This issue has been fixed...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Do not leak some plane state. Apparently, no one noticed that the mdp5 plane states are being leaked quite severely. This issue was addressed since we introduced the planestate-commit refcount mechanism a few years...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: drm/nouveau/debugfs: fixed the memory leak when releasing files. When using singleopen to open a file, singlerelease should be called. Otherwise, the memory allocated with singleopen may be leaked...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: Invalid parameter check in msmdsiPhyEnable The function performs a check on the “phy” input parameter, however, it is used before the check. The “dev” variable is initialized after the sanity check to avoid a possibl...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Added a check for cstate. Since kzalloc may fail and return a NULL pointer, it would be better to check the cstate to avoid dereferencing the NULL pointer in drmatomichelpercrtcreset. Patchwork:...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/msm/dsi: fixed memory corruption caused by too many bridges. Added a missing sanity check on the bridge counter to prevent corruption of data beyond the fixed-sized bridge array, in case there are ever more than eight...

CVE-2026-68383

CVE-2026-68383 affects the Linux kernel drm/xe/guc component. The vulnerability arises because the scheduler keeps a pointer to the timeline name, but q->name is freed when the exec queue is freed while scheduler fences can still reference it, leading to a use-after-free. The published fix sto...

EUVD-2026-55369

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Return error on non-migratable faults requiring devmem Non-migratable faults that require devmem incorrectly jump to the 'out' label, which squashes the error code intended to be returned to the upper layers. Fix this by...

CVE-2026-68233

In the Linux kernel DRM/VC4 subsystem, CVE-2026-68233 addresses a use-after-free-like race where a timer callback (BO cache timer) can be rearmed by time_work during teardown. vc4_bo_cache_destroy() deletes the timer and cancels the work, but the cancelled work can rearm the timer and queue work ...

drm/edid: fix OOB read in drm_parse_tiled_block()

...

The vulnerability of the kfd_event_page_set() function in the drivers/gpu/drm/amd/amdkfd/kfd_events.c driver for the Direct Rendering Infrastructure (DRI) of AMD graphics cards in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the kfdeventpageset function in the drivers/gpu/drm/amd/amdkfd/kfdevents.c module of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to out-of-buffer writing. Exploiting this vulnerability could allow an attacker to...

ROS-20260804-73-0024

The vulnerability of the DRM/amdkfd component in Linux kernel relates to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to trigger a service failure...

The vulnerability of the msm_gem_free_object() function in the drivers/gpu/drm/msm/msm_gem.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the msmgemfreeobject function in the drivers/gpu/drm/msm/msmgem.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to state management errors. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the xe_pagefault_service() function in the drivers/gpu/drm/xe/xe_pagefault.c file of the DRI driver for the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xepagefaultservice function in the drivers/gpu/drm/xe/xepagefault.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the execution of operations outside the memory buffer. Exploiting this vulnerability could allow a remote...

kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()

A flaw was found in the Linux kernel's Direct Rendering Manager DRM Graphics Execution Manager GEM component. This vulnerability arises from an inconsistent calculation of plane dimensions, which can lead to incorrect memory allocation checks. A local attacker could exploit this by creating a...