Direct Rendering Manager DoS

The vulnerability of the Direct Rendering Manager DRM subsystem in the Linux operating system is related to the dereferencing of a pointer with an expired reference count. Exploiting this vulnerability can allow an attacker to trigger a service failure...

CLSA-2024-1709204660 kernel: Fix of 7 CVEs

KVM: nSVM: avoid picking up unsupported bits from L2 in intctl CVE-2021-3653 CVE-2021-3653 - xen/netfront: fix leaking data in shared pages CVE-2022-33740 - xfs: fix up non-directory creation in SGID directories CVE-2021-4037 - netsched: clsroute: remove from list when handle is 0 CVE-2022-2588 -...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Do not leak a resource during the swapout movement operation. If moving the buffer to the system for swapout failed, we were leaking a resource. This issue has been fixed...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: drm/nouveau/debugfs: fixed the memory leak when releasing files. When using singleopen to open a file, singlerelease should be called. Otherwise, the memory allocated with singleopen may be leaked...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Added a check for cstate. Since kzalloc may fail and return a NULL pointer, it would be better to check the cstate to avoid dereferencing the NULL pointer in drmatomichelpercrtcreset. Patchwork:...

Astra Linux – vulnerability in linux, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: invalid parameter check in msmdsiphyenable The function performs a check on the “phy” input parameter, however, it is used before the check. Initialize the “dev” variable after the sanity check to avoid a possible NU...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Do not leak some plane state. Apparently, no one noticed that the mdp5 plane states are being leaked quite severely. This issue was addressed since we introduced the planestate-commit refcount mechanism a few years...

ROS-20261013-73-0241

The vulnerability of the dpuruntimesuspend function in the drivers/gpu/drm/msm/disp/dpu1/dpukms.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow a remote attacker to cause...

ROS-20261013-73-0045

The vulnerability of the vidiconnectionioctl function in the drivers/gpu/drm/exynos/exynosdrmvidi.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to the use of an unreliable pointer. Exploiting this vulnerability can allow an attacker to access protected...

CVE-2026-80903

A flaw was found in the Linux kernel's Direct Rendering Manager DRM Xe output/audio OA module. When a specific configuration emission function fails, it does not properly release allocated memory for synchronization entries. This oversight leads to a memory leak, where system memory becomes...

ROS-20261007-73-0075

The vulnerability of the intelenginesresetdefaultsubmission function in the drivers/gpu/drm/i915/gt/intelenginecs.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to...

ROS-20261006-73-0065

The vulnerability of the logicvcdrmconfigparse function in the drivers/gpu/drm/logicvc/logicvcdrm.c file of the Direct Rendering Infrastructure DRI driver module in the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cau...

CVE-2026-47567

A flaw was found in the NVIDIA GPU display driver. A local user with standard privileges can trigger this vulnerability within the kernel mode layer by exhausting the Direct Rendering Manager DRM virtual memory area VMA offset address space. This uncontrolled resource consumption can lead to a...

Linux Kernel DRI DoS

The vulnerability of the rzg2lmipidsiatomicdisable function in the drivers/gpu/drm/renesas/rz-du/rzg2lmipidsi.c driver of the Direct Rendering Infrastructure DRI component of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can...

Direct Rendering Infrastructure GPU DRM Exynos Buffer Overflow DoS

The vulnerability in the vidiconnectionioctl function within the drivers/gpu/drm/exynos/exynosdrmvidi.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel involves dereferencing an untrusted pointer. Exploitation of this vulnerability may allow an attacker to gain access ...

amdgpu_amdkfd_gpuvm_alloc_memory_of_gpu Heap Buffer Overflow DoS

The vulnerability of the amdgpuamdkfdgpuvmallocmemoryofgpu function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to the copying of buffers without checking the size of the...

AMD GPU DRI Driver DoS

The vulnerability in the sdmav40ringemitfence function within the drivers/gpu/drm/amd/amdgpu/sdmav40.c file of the AMD GPU DRI driver is related to improper deactivation or release of resources. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

ROS-20260929-73-0016

The vulnerability of the i915vmapinww function in the drivers/gpu/drm/i915/i915vma.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0035

The vulnerability of the dcstreamgetscanoutpos function in the drivers/gpu/drm/amd/display/dc/core/dcstream.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow a...

CVE-2026-98106

A flaw was found in the Linux kernel's Direct Rendering Manager DRM pagemap component. A race condition during memory migration allows a local user to cause a Denial of Service DoS. When device-private memory is migrated to system memory during a page fault, a timing window permits an eviction...