Vulnerability of the intel_hdcp_gsc_check_status() function in the driver/gpu/drm/xe/display/xe_hdcp_gsc.c module – A driver for supporting Direct Rendering Infrastructure (DRI) in Linux kernels, which allows a hacker to cause service failure

Vulnerability of the intelhdcpgsccheckstatus function in the driver/gpu/drm/xe/display/xehdcpgsc.c module – The Linux kernel’s DRI support driver is vulnerable due to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause service failures...

Vulnerability of the drm_fbdev_dma_fbdestroy() function in the drivers/gpu/drm/drm_fbdev_dma.c module – This driver provides support for Linux kernel’s Direct Rendering Infrastructure (DRI), allowing a hacker to cause a service failure.

Vulnerability of the drmfbdevdmafbdestroy function in the drivers/gpu/drm/drmfbdevdma.c module – The DRI driver for Linux kernel’s direct rendering infrastructure has a unvalidated return value, which can lead to the assignment of a null pointer. Exploiting this vulnerability could allow an...

Vulnerability of the dcn21_set_backlight_level() function in the drivers/gpu/drm/amd/display/dc/dcn21/dcn21HWSeq.c module – This driver is part of the Linux kernel’s Direct Rendering Infrastructure (DRI) support for AMD graphics cards. It allows a malicious actor to cause a system failure.

Vulnerability of the dcn21setbacklightlevel function in the drivers/gpu/drm/amd/display/dc/dcn21/dcn21HWSeq.c module – The drivers for AMD graphics cards that support Direct Rendering Infrastructure DRI in Linux operating systems rely on pointer swapping. Exploiting this vulnerability could allow...

Vulnerability of the intel_hdcp_read_valid_bksv() function in the driver/gpu/drm/i915/display/intel_hdcp.c module – This driver is part of the Linux kernel’s Direct Rendering Infrastructure (DRI) support mechanism. An attacker can exploit this vulnerability to cause a service failure.

Vulnerability of the intelhdcpreadvalidbksv function in the driver/gpu/drm/i915/display/intelhdcp.c module – The Linux DRI driver is vulnerable due to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the dcn35_set_drr() function in the drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c file – This function is part of the driver for AMD graphics cards that support Direct Rendering Infrastructure (DRI). It can be exploited by attackers to cause service failures.

Vulnerability of the dcn35setdrr function in the drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35hwseq.c module – Drivers that support Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems are vulnerable due to the reliance on pointer manipulation. Exploiting this...

Vulnerability of the mtk_crtcDestroy() function in the drivers/gpu/drm/mediatek/mtk_crtc.c module – This driver supports the Direct Rendering Infrastructure (DRI) of Mediatek graphics cards in Linux kernel. It can be exploited by attackers to cause service failures.

Vulnerability of the mtkcrtcDestroy function in the drivers/gpu/drm/mediatek/mtkcrtc.c module – Drivers that support Direct Rendering Infrastructure DRI for Mediatek graphics cards in Linux operating systems are vulnerable due to a pointer manipulation issue. Exploiting this vulnerability could...

Vulnerability of the intel_dp_hdcp2_get_capability() function in the drivers/gpu/drm/i915/display/intel_dp_hdcp.c module – A driver for supporting Linux’s Direct Rendering Infrastructure (DRI), which allows a hacker to trigger a service failure.

Vulnerability of the inteldphdcp2getcapability function in the drivers/gpu/drm/i915/display/inteldphdcp.c module – The Linux DRI driver is vulnerable due to pointer manipulation issues. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the xe_oa_release() function in the drivers/gpu/drm/xe/xe_oa.c module – The DRI driver for Linux kernel’s direct rendering infrastructure allows a hacker to trigger a service failure.

Vulnerability of the xeoarelease function in the drivers/gpu/drm/xe/xeoa.c module – The driver for Linux’s Direct Rendering Infrastructure DRI has a vulnerability related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cau...

drm/meson: remove drm bridges at aggregate driver unbind time

...

SUSE SLES12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2025:4189-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4189-1 advisory. The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2021-4460:...

The vulnerability of the `create_validate_stream_for_sink()` function in the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c file of the DRI support driver for AMD GPU-based Linux operating system kernels allows a malicious actor to cause a service failure.

The vulnerability of the createvalidatestreamforsink function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudm.c file of the Direct Rendering Infrastructure DRI support driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability...

The vulnerability of the gmc_v10_0_hw_fini() function in the drivers/gpu/drm/amd/amdgpu/gmc_v10_0.c driver module allows a hacker to cause a service failure in AMD GPU-based Linux operating system Direct Rendering Infrastructure (DRI).

The vulnerability of the gmcv100hwfini function in the drivers/gpu/drm/amd/amdgpu/gmcv100.c driver module relates to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the a3xx_gpu_init() function in the drivers/gpu/drm/msm/adreno/a3xx_gpu.c file of the driver module allows a hacker to cause a service failure. This vulnerability exposes the driver for direct rendering infrastructure support in Linux kernels.

The vulnerability of the a3xxgpuinit function in the drivers/gpu/drm/msm/adreno/a3xxgpu.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernels, is related to the absence of a standardized error-handling mechanism. Exploiting this vulnerability could allow an attacker...

The vulnerability of the msm_edp_ctrl_power() function in the drivers/gpu/drm/msm/edp/edp_ctrl.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the msmedpctrlpower function in the drivers/gpu/drm/msm/edp/edpctrl.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernel, is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the a4xx_gpu_init() function in the drivers/gpu/drm/msm/adreno/a4xx_gpu.c file of the driver module allows a hacker to cause a service failure. This vulnerability exposes the driver to attacks related to Direct Rendering Infrastructure (DRI) in Linux operating systems.

The vulnerability of the a4xxgpuinit function in the drivers/gpu/drm/msm/adreno/a4xxgpu.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernels, is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to cause a servic...

Vulnerability of the amdgpu_umchandle_bad_pages() function in the driver/gpu/drm/amd/amdgpu/amdgpu_umc.c file – This driver is part of the Linux operating system’s Direct Rendering Infrastructure (DRI) support for AMD GPU cores. It allows a hacker to trigger a service failure.

Vulnerability of the amdgpuumchandlebadpages function in the driver/gpu/drm/amd/amdgpu/amdgpuumc.c file – The Linux kernel driver for AMD GPU Direct Rendering Infrastructure supports the reallocation of previously released memory. Exploiting this vulnerability can allow an attacker to cause a...

CVE-2025-40166

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Check GuC running state before deregistering exec queue In normal operation, a registered exec queue is disabled and deregistered through the GuC, and freed only after the GuC confirms completion. However, if the driv...

drm/vmwgfx: Fix Use-after-free in validation

...

drm/vmwgfx: Fix a null-ptr access in the cursor snooper

...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990840)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990840 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: ensure the fwinfo is not null before using it This resolves the dereference null retu...