CVE-2026-64219

CVE-2026-64219 affects the Linux kernel drm/amd/display path, specifically dc_process_dmub_aux_transfer_async, where payload->length is copied into a 16-byte stack buffer (dpaux.data[16]) guarded only by an ASSERT(). If length > 16, this can cause a stack-based overflow; additionally, dc-&g...

Important: libnvsdm

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code...

PT-2026-64445

Name of the Vulnerable Software and Affected Versions Open Access Management OpenAM versions 13.0.0 through 16.1.1 Description The OAuth2 authorize endpoint's consent page, when using display=wap, reflects request-derived values through ConsentRequiredResource and wap/authorize.ftl without proper...

Important: libnvidia-nscq

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code...

CVE-2026-64219: Uncontrolled Recursion

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and linkindex in dcprocessdmubauxtransferasync Why&How dcprocessdmubauxtransferasync copies payload-length bytes into a 16-byte stack buffer dpaux.data16 guarded only by an ASSERT, which i...

Amazon Linux 2023 : nvidia-modprobe (ALAS2023NVIDIA-2026-302)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-302 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Amazon Linux 2023 : libnvidia-nscq (ALAS2023NVIDIA-2026-308)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-308 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Amazon Linux 2023 : cuda-compat-13-0 (ALAS2023NVIDIA-2026-313)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-313 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Important: cuda-compat

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code...

Important: nvlink5

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code...

Amazon Linux 2023 : libnvidia-cfg, libnvidia-fbc, libnvidia-gpucomp (ALAS2023NVIDIA-2026-309)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-309 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Amazon Linux 2023 : nvidia-open (ALAS2023NVIDIA-2026-301)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-301 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Amazon Linux 2023 : libnvsdm, libnvsdm-devel (ALAS2023NVIDIA-2026-307)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-307 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Amazon Linux 2023 : nvidia-libXNVCtrl, nvidia-libXNVCtrl-devel, nvidia-settings (ALAS2023NVIDIA-2026-303)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-303 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Amazon Linux 2023 : nvidia-fabric-manager-devel, nvidia-fabricmanager (ALAS2023NVIDIA-2026-306)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-306 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Amazon Linux 2023 : nvidia-persistenced (ALAS2023NVIDIA-2026-300)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-300 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

PT-2026-64334

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack buffer overflow occurs in the dc process dmub aux transfer async function when payload-length bytes are copied into a 16-byte stack buffer dpaux.data16. Because the check is...

Amazon Linux 2023 : nvidia-imex (ALAS2023NVIDIA-2026-305)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-305 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation

A flaw was found in the Linux kernel's AMD display component. This vulnerability arises from incorrect validation of display mode changes during Display Stream Compression DSC processing. A local attacker could exploit this by initiating specific display configuration changes, which may lead to a...

SUSE-SU-2026:22810-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 bsc1243603. - CVE-2026-31503: udp: Fix wildcard bind...