PT-2026-93461

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A lock leak occurs during a GPU reset. The dm suspend function acquires the dc lock and expects dm resume to release it. However, if the functions amdgpu dm commit zero streams or dm dmu...

CVE-2026-89811: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add TLB flush after MES queue eviction/suspension MES Micro Engine Scheduler does not perform heavy-weight TLB invalidation after unmapping queues, unlike HWS which does this automatically. This causes a race conditio...

PT-2026-93452

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Micro Engine Scheduler MES, which fails to perform heavy-weight Translation Lookaside Buffer TLB invalidation after unmapping queues. This allows in-flight...

PT-2026-93469

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the amdgpu vram mgr init function where drmm cgroup register region is called before INIT LIST HEAD and gpu buddy init. If drmm cgroup register region fails, the...

PT-2026-93891

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.28.0 Description An issue exists where the engine fails to properly budget GPU memory when a user specifies a GPU decoder at request time. Specifically, request bodies for Chat Completions and Responses can set media i...

CVE-2026-89820: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix dclock leak on GPU reset error paths On GPU reset, dmsuspend takes dclock and leaves it for dmresume to drop. If amdgpudmcommitzerostreams or dmdmubhwinit fails, the function returns with the lock still held...

Linux Distros Unpatched Vulnerability : CVE-2026-89811

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: Add TLB flush after MES queue eviction/suspension MES Micro Engine Scheduler does not perform heavy-weight TLB invalidation after unmapping queues,...

Linux Distros Unpatched Vulnerability : CVE-2026-89812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: force complete the MES ring fences on reset The MES scheduler ring has no drm scheduler noscheduler = true, so it is skipped by the force-completion...

CVE-2026-58765

In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58765

A logic error in the GPU code allows for a potential permission bypass . This vulnerability can lead to a local escalation of privilege requiring System execution privileges . Exploitation does not require user interaction . Specific exploit details are not provided in the documents.

CVE-2026-58765

In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79019

In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58765

In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

Chromium CVE-2026-87647: Uninitialized resource in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-87452: Incorrect authorization in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

ROS-20260915-73-0087

The vulnerability of the GPU components in Google Chrome and Microsoft Edge relates to reading data from buffer areas beyond their acceptable limits. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

CVE-2026-58765: Protection Mechanism Failure

In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92370

In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

ROS-20260915-73-0179

The vulnerability of the GPU components in Google Chrome and Microsoft Edge relates to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

ROS-20260915-73-0192

The vulnerability of the GPU components in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...