CVE-2026-43236

The CVE-2026-43236 vulnerability affects the Linux kernel’s drm/atmel-hlcdc component. The atmel_hlcdc_plane_atomic_duplicate_state() callback copied the drm_plane_state without duplicating the base state, leaving state->commit pointing to the old object and enabling a use-after-free in the ne...

SUSE CVE-2026-31767

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode Stop adjusting the horizontal timing values based on the compression ratio in command mode. Bspec seems to be telling us to do this only in video mode, and...

CVE-2026-31767 drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode Stop adjusting the horizontal timing values based on the compression ratio in command mode. Bspec seems to be telling us to do this only in video mode, and...

CVE-2026-31767

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode Stop adjusting the horizontal timing values based on the compression ratio in command mode. Bspec seems to be telling us to do this only in video mode, and...

CVE-2026-31571

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Unlink NV12 planes earlier unlinknv12plane will clobber parts of the plane state potentially already set up by planeatomiccheck, so we must make sure not to call the two in the wrong order. The problem happens when a...

CVE-2026-31562 drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dsi: Store driver data before invoking mipidsihostregister The call to mipidsihostregister triggers a callback to mtkdsibind, which uses devgetdrvdata to retrieve the mtkdsi struct, so this structure needs to be...

AZL-83216 CVE-2026-31488 affecting package kernel for versions less than 6.6.141.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode changes in DSC validation Starting with commit 17ce8a6907f7 "drm/amd/display: Add dsc pre-validation in atomic check", amdgpu resets the CRTC state modechanged flag to false when...

PT-2026-34365

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amd/display component where the system fails to verify if the ext caps pointer is valid during backlight setup. This occurs because LVDS connectors do not...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an error in DSC validation in the AMD display driver. This error allows bypassing irrelevant mode...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011177)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011177 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential null-deref in dmresume Why Fixing smatch error: dmresume error: we...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011233)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011233 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Free resources after unregistering them The DP component's unbind operation walks...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007564)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007564 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: display: Fix refcount leak bug In omapdssinitfbdev, offindnodebyname will return a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007545)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007545 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/sti: Fix return type of stidvo,hda,hdmiconnectormodevalid With clang's kernel control flow...

The vulnerability in the dpu_crtc_reset() function of the drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c driver module of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the dpucrtcreset function in the drivers/gpu/drm/msm/disp/dpu1/dpucrtc.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the mtk_ovl_layer_off() function in the drivers/gpu/drm/mediatek/mtk_disp_drv.h driver module allows a hacker to cause a service failure. This vulnerability relates to the Direct Rendering Infrastructure (DRI) support for Mediatek graphics cards in Linux operating systems.

The vulnerability of the mtkovllayeroff function in the drivers/gpu/drm/mediatek/mtkdispdrv.h file, a driver for supporting Direct Rendering Infrastructure DRI in Mediatek graphics cards, related to Linux operating systems, stems from improper resource cleanup or release. Exploiting this...

The vulnerability of the mdp5_crtc_reset() function in the drivers/gpu/drm/msm/disp/mdp5/mdp5_crtc.c driver of the Direct Rendering Infrastructure (DRI) infrastructure of the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the mdp5crtcreset function in the drivers/gpu/drm/msm/disp/mdp5/mdp5crtc.c driver of the Direct Rendering Infrastructure DRI infrastructure module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause ...

The vulnerability of the mdp5_crtc_setup_pipeline() function in the drivers/gpu/drm/msm/disp/mdp5/mdp5_crtc.c driver module allows a hacker to trigger a service failure in the Linux operating system’s Direct Rendering Infrastructure (DRI).

The vulnerability of the mdp5crtcsetuppipeline function in the drivers/gpu/drm/msm/disp/mdp5/mdp5crtc.c driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the imx_pd_connector_get_modes() function in the drivers/gpu/drm/imx/parallel-display.c driver, which supports the Direct Rendering Infrastructure (DRI) of the Linux operating system’s kernel, allows a malicious actor to cause a service failure.

The vulnerability of the imxpdconnectorgetmodes function in the drivers/gpu/drm/imx/parallel-display.c driver, which supports the Direct Rendering Infrastructure DRI of the Linux operating system’s kernel, is related to improper memory release. Exploiting this vulnerability could allow an attacke...

The vulnerability of the dccg35_getotherenabled_symclk_fe() function in the drivers/gpu/drm/amd/display/dc/dcn35/dcn35_dccg.c driver, which supports Direct Rendering Infrastructure (DRI) for AMD video cards with Linux operating systems. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dccg35getotherenabledsymclkfe function in the drivers/gpu/drm/amd/display/dc/dcn35/dcn35dccg.c driver, which supports Direct Rendering Infrastructure DRI for AMD video cards with Linux operating systems, is related to errors in processing input data length parameters...

ROS-20260317-73-0006

A vulnerability in the drivers/gpu/drm/amd/display/dc/hwss/dce110/dce110hwseq.c module of the Linux kernel is related to the ability to access a null pointer. Exploitation of the vulnerability could allow an attacker to cause a denial of service...