Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to perform boundary checks on user control pointers in drm-compatible ioctl paths, which could lea...

PT-2026-36419

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pxp start function where the restart flag is not cleared after jumping back. Failure to clear this flag causes the system to continuously jump back to the beginnin...

The vulnerability of the `mcde_dsi_bind()` function in the `drivers/gpu/drm/mcde/mcde_dsi.c` file of the Linux kernel’s Direct Rendering Infrastructure driver allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the mcdedsibind function in the drivers/gpu/drm/mcde/mcdedsi.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to errors during link counter updates. Exploiting this vulnerability may allow an attacker to gain unauthorized access to...

PT-2026-52929

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the xe eu stall stream close function. The drm dev put function is called before the stream is disabled and its resources are freed. If this call drops t...

drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat

...

CVE-2026-31479 drm/xe: always keep track of remap prev/next

In the Linux kernel, the following vulnerability has been resolved: drm/xe: always keep track of remap prev/next During 3D workload, user is reporting hitting: 413.361679 WARNING: drivers/gpu/drm/xe/xevm.c:1217 at vmbindioctlopsunwind+0x1e2/0x2e0 xe, CPU7: vkd3dqueue/9925 413.361944 CPU: 7 UID:...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011173)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011173 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate the box size for the snooped cursor Invalid userspace dma surface copies cou...

The vulnerability in the `intel_context_migrate_copy()` function of the `drivers/gpu/drm/i915/gt/intel_migrate.c` driver file of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the intelcontextmigratecopy function in the drivers/gpu/drm/i915/gt/intelmigrate.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability could...

The vulnerabilities of the functions sti_dvo_connector_mode_valid() (drivers/gpu/drm/sti/sti_dvo.c), sti_hda_connector_mode_valid() (drivers/gpu/drm/sti/sti_hda.c), and sti_hdmi_connector_mode_valid() (drivers/gpu/drm/sti/sti_hdmi.c) in the Linux kernel’s Direct Rendering Infrastructure (DRI) driver libraries allow a hacker to cause a service failure.

The vulnerabilities of the functions stidvoconnectormodevalid drivers/gpu/drm/sti/stidvo.c, stihdaconnectormodevalid drivers/gpu/drm/sti/stihda.c, and stihdmiconnectormodevalid drivers/gpu/drm/sti/stihdmi.c in the Linux kernel’s Direct Rendering Infrastructure DRI driver libraries are related to...

ROS-20260407-73-0025

A vulnerability in the drm/amd/display component of the Linux kernel is related to pointer dereferencing errors. Exploitation of the vulnerability allows an attacker to cause a denial of service...

drm/amdgpu: Limit BO list entry count to prevent resource exhaustion

...

Linux Distros Unpatched Vulnerability : CVE-2026-23470

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/imagination: Fix deadlock in soft reset sequence The soft reset sequence is currently executed from the threaded IRQ handler, hence it cannot call disableir...

Linux Distros Unpatched Vulnerability : CVE-2026-23468

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Userspace can pass an arbitrary number of BO list entries via the bonumber field. Although...

SUSE CVE-2026-23418

In the Linux kernel, the following vulnerability has been resolved: drm/xe/regsr: Fix leak on xastore failure Free the newly allocated entry when xastore fails to avoid a memory leak on the error path. v2: use goto failfree. Bala cherry picked from commit 6bc6fec71ac45f52db609af4e62bdb96b9f5fadb...

CVE-2026-23471

In the Linux kernel, the following vulnerability has been resolved: drm: Fix use-after-free on framebuffers and property blobs when calling drmdevunplug When trying to do a rather aggressive test of igt's "xemoduleload --r reload" with a full desktop environment and game running I noticed a few...

CVE-2026-23430

A flaw was found in the Linux kernel, specifically within the drm/vmwgfx component. This vulnerability occurs when the kernel incorrectly overwrites the Kernel Mode Setting KMS surface dirty tracker. This error leads to a memory leak, which can degrade system performance and potentially cause...

CVE-2026-23468

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Userspace can pass an arbitrary number of BO list entries via the bonumber field. Although the previous multiplication overflow check prevents out-of-bounds...

CVE-2026-31390

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in xevmmadviseioctl When checkboargsaresane validation fails, jump to the new freevmas cleanup label to properly free the allocated resources. This ensures proper cleanup in this error path. cherry picked...

The vulnerability of the msm_dsi_host_init() function in the drivers/gpu/drm/msm/dsi/dsi_host.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the msmdsihostinit function in the drivers/gpu/drm/msm/dsi/dsihost.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the msm_dp_modeset_init() function in the driver/gpu/drm/msm/dp/dp_display.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the msmdpmodesetinit function in the driver/gpu/drm/msm/dp/dpdisplay.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to memory writing beyond the allowed buffer data size limits. Exploiting this vulnerability could allow an...