The vulnerability of the meson_encoder_hdmi_init() function in the drivers/gpu/drm/meson/meson_encoder_hdmi.c driver file of the Direct Rendering Infrastructure (DRI) infrastructure of the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the mesonencoderhdmiinit function in the drivers/gpu/drm/meson/mesonencoderhdmi.c driver of the Direct Rendering Infrastructure DRI infrastructure of the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability can allow an attack...

The vulnerabilities of the functions drm_gem_shmem_vmap_locked() and drm_gem_shmem_vunmap_locked() in the module drivers/gpu/drm/drm_gem_shmem_helper.c of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allow a hacker to cause a service failure.

The vulnerabilities of the functions drmgemshmemvmaplocked and drmgemshmemvunmaplocked in the module drivers/gpu/drm/drmgemshmemhelper.c of the Direct Rendering Infrastructure DRI driver for the Linux kernel are related to pointer manipulation. Exploiting these vulnerabilities can allow an attack...

The vulnerability of the amdgpu_cs_pass1() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c source file of the DRI-based Linux kernel driver for AMD GPU cores allows a hacker to cause a system failure.

The vulnerability of the amdgpucspass1 function in the drivers/gpu/drm/amd/amdgpu/amdgpucs.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can all...

CVE-2026-23051

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix drm panic null pointer when driver not support atomic When driver not support atomic, fb using plane-fb rather than plane-state-fb. cherry picked from commit 2f2a72de673513247cd6fae14e53f6c40c5841ef...

The vulnerability of the drm_fb_helper_damage() function in the drivers/gpu/drm/drm_fb_helper.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the drmfbhelperdamage function in the drivers/gpu/drm/drmfbhelper.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to a single-occurrence offset error. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability in the `get_gpio_i2c_info()` function of the `drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c` driver file, a part of the Direct Rendering Infrastructure (DRI) graphics driver framework for AMD GPUs with Linux operating systems. This vulnerability allows an attacker to cause a system failure.

The vulnerability of the getgpioi2cinfo function in the drivers/gpu/drm/amd/display/dc/bios/biosparser2.c file, a driver for the Direct Rendering Infrastructure DRI of AMD graphics cards in Linux operating systems, is related to unvalidated array indexing. Exploiting this vulnerability could allo...

EUVD-2026-5055

In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix NULL fb and crtc dereferences on USB disconnect On disconnect drmatomichelperdisableall is called which sets both the fb and crtc for a plane to NULL before invoking a commit. This causes a kernel oops on every displ...

Oracle Linux 9 : kernel (ELSA-2026-1143)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-1143 advisory. - Bluetooth: hcisock: Prevent race in socket write iter and sock bind CKI Backport Bot RHEL-139462 CVE-2025-68305 - dm: fix dmblkreportzones CKI Backpo...

ROS-20260126-73-0046

A vulnerability in the drm/amd/pm component of the Linux operating system kernel is related to the lack of division by zero check. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Use-after-free in device mapper due to race condition in zone reporting CVE-2025-38141 kernel: Linux kernel use-after-free in eventpoll CVE-2025-38349 kernel: drm/xe: Fix...

ROS-20260126-73-0050

A vulnerability in the drm/amd/pm component of the Linux kernel is related to the lack of division by zero check. Exploitation of the vulnerability could allow an attacker to affect the availability of protected information and cause denial of service...

RLSA-2026:0793 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/xe: Make dma-fences compliant with the safe access rules CVE-2025-38703 kernel: smb: client: let recvdone verify dataoffset, datalength and remainingdatalength CVE-2025-39933 kernel:...

kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies

A flaw was found in the kernel subsystem handling of the DRM scheduler. Under certain error conditions, the function drmschedjobadddependency consumes a fence reference and then later erroneously attempts to free it again double free. This may lead to memory corruption and, in some configurations...

drm/msm/dpu: Add missing NULL pointer check for pingpong interface

...

drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer

...

SUSE CVE-2025-68802

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Limit numsyncs to prevent oversized allocations The exec and vmbind ioctl allow userspace to specify an arbitrary numsyncs value. Without bounds checking, a very large numsyncs can force an excessively large allocation,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002181)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002181 advisory. Integer overflow in drivers/gpu/drm/i915/i915gemexecbuffer.c in the i915 driver in the Direct Rendering Manager DRM subsystem in the Linux kernel through 3.8.3, as...

MiracleLinux 4 : kernel-2.6.32-220.23.1.el6 (AXSA:2012-646:05)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-646:05 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...

CVE-2025-71076

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Limit numsyncs to prevent oversized allocations The OA open parameters did not validate numsyncs, allowing userspace to pass arbitrarily large values, potentially leading to excessive allocations. Add check to ensure...

CVE-2025-71083 drm/ttm: Avoid NULL pointer deref for evicted BOs

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Avoid NULL pointer deref for evicted BOs It is possible for a BO to exist that is not currently associated with a resource, e.g. because it has been evicted. When devcoredump tries to read the contents of all BOs for...