PT-2026-86610

In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11122991; Issue ID: MSV-8132...

CVE-2026-20515: Use After Free

In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11122991; Issue ID: MSV-8132...

GHSA-QWM4-QH6W-59XR vulnerabilities

Vulnerabilities for packages: py3.14-virtualenv, kubeflow-katib, nemo-rl-cuda-13.0, datadog-agent, datadog-agent-fips, tensorflow-gpu-jupyter...

CVE-2026-13346 vulnerabilities

Vulnerabilities for packages: py3.14-virtualenv, kubeflow-katib, nemo-rl-cuda-13.0, datadog-agent, datadog-agent-fips, tensorflow-gpu-jupyter...

CVE-2026-45200

Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause double free and kernel heap corruption. Scenario caused by fabricating a specific combination of flags on the allocation interface that woul...

CVE-2026-45197

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory. The firmware uses data provided by the Guest VM to set up accesses to memory. It validated this before use, but a...

CVE-2026-45197

Kernel software running inside a Guest VM can exploit a Time-of-Check Time-of-Use (TOCTOU) race condition in the GPU Firmware to perform unauthorized memory operations. The vulnerability occurs because the firmware uses data provided by the Guest VM to set up memory accesses; while the firmware p...

CVE-2026-45197 GPU DDK - TOCTOU affecting psFWMemContext->uiPageCatBaseRegSet

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory. The firmware uses data provided by the Guest VM to set up accesses to memory. It validated this before use, but a...

CVE-2026-45197 GPU DDK - TOCTOU affecting psFWMemContext->uiPageCatBaseRegSet

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory. The firmware uses data provided by the Guest VM to set up accesses to memory. It validated this before use, but a...

EUVD-2026-70858

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory. The firmware uses data provided by the Guest VM to set up accesses to memory. It validated this before use, but a...

CVE-2026-45200 GPU DDK - Double free in _FreeOSPages due to incorrect allocation flag set by _EncodeAllocationFlags

Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause double free and kernel heap corruption. Scenario caused by fabricating a specific combination of flags on the allocation interface that woul...

CVE-2026-45200

The GPU DDK is vulnerable to a double free and subsequent kernel heap corruption (CVE-2026-45200). The issue resides in the _FreeOSPages function, which can be triggered when _EncodeAllocationFlags sets an incorrect allocation flag. A non-privileged user can exploit this by conducting improper GP...

EUVD-2026-70857

Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause double free and kernel heap corruption. Scenario caused by fabricating a specific combination of flags on the allocation interface that woul...

CVE-2026-45200 GPU DDK - Double free in _FreeOSPages due to incorrect allocation flag set by _EncodeAllocationFlags

Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause double free and kernel heap corruption. Scenario caused by fabricating a specific combination of flags on the allocation interface that woul...

PT-2026-85373

Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause double free and kernel heap corruption. Scenario caused by fabricating a specific combination of flags on the allocation interface that woul...

PT-2026-85372

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory. The firmware uses data provided by the Guest VM to set up accesses to memory. It validated this before use, but a...

Linux Distros Unpatched Vulnerability : CVE-2026-80747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: Add bounds check for CRAT subtype length The CRAT parser validates that the subtype header fits within the image, but does not verify that the...

The vulnerability of the `virtio_gpu_dma_fence_wait()` function in the `drivers/gpu/drm/virtio/virtgpu_submit.c` file of the Direct Rendering Infrastructure (DRI) driver of the Linux operating system allows a malicious actor to trigger a service failure.

The vulnerability of the virtiogpudmafencewait function in the drivers/gpu/drm/virtio/virtgpusubmit.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the execution of a loop with an unreachable exit condition “Infinite loop”. Exploiting this...

The vulnerability of the require_uniform_address_uniform() function in the drivers/gpu/drm/vc4/vc4_validate_shaders.c driver module of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the requireuniformaddressuniform function in the drivers/gpu/drm/vc4/vc4validateshaders.c driver for the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow a remot...

CVE-2026-45200: Use After Free

Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause double free and kernel heap corruption. Scenario caused by fabricating a specific combination of flags on the allocation interface that woul...