PT-2025-23189 · Techpowerup · Gpu-Z

Name of the Vulnerable Software and Affected Versions: TechPowerUp GPU-Z version 2.23.0 Description: A problematic issue was found in the function sub 140001880 within the GPU-Z.sys library, affecting the 0x8000645C IOCTL Handler component. This issue leads to a memory leak. The attack can be...

USN-7510-7 linux-aws, linux-intel-iotg-5.15, linux-nvidia-tegra-igx, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Network block device...

USN-7513-4: Linux kernel (HWE) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - RISC-V architecture; - x86 architecture; - Block layer subsystem; - Compute Acceleration Framework; - ACPI drivers;...

USN-7521-3 linux-lowlatency, linux-lowlatency-hwe-6.11, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Serial ATA and Parallel...

Intel Data Center GPU Flex Series Access Control Error Vulnerability (CNVD-2025-21342)

Intel Data Center GPU Flex Series is Intel's high-performance GPU solution for data centers, mainly serving cloud gaming, AI visual inference, media processing and other scenarios. The Intel Data Center GPU Flex Series suffers from an Access Control Error vulnerability that stems from improper...

CVE-2024-49196

An issue was discovered in the GPU in Samsung Mobile Processor Exynos 1480 and 2400. Type confusion leads to a Denial of Service...

USN-7510-6 linux-aws-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Network block device...

CVE-2024-49196

An issue was discovered in the GPU in Samsung Mobile Processor Exynos 1480 and 2400. Type confusion leads to a Denial of Service...

PT-2025-23026

Double unlock in x86 guest IRQ handling. CVE-2024-31143 Xapi: Metadata injection attack against backup/restore functionality. CVE-2024-31144 Error handling in x86 IOMMU identity mapping. CVE-2024-31145 PCI device pass-through with shared resources. CVE-2024-31146 x86: Deadlock in vlapic error...

CVE-2024-49196

CVE-2024-49196 concerns the GPU in Samsung Mobile Processor Exynos 1480 and 2400. The vulnerability is a type confusion in the GPU that can lead to a Denial of Service. Public exploit details are not provided in the connected documents. According to PT Security references, there is currently no i...

PT-2025-23015 · Samsung · Exynos

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos versions 1480 through 2400 Description: An issue was discovered in the GPU, leading to a Denial of Service due to type confusion. Recommendations: For Samsung Mobile Processor Exynos versions 1480 through 2400,...

The vulnerability in the module drivers/gpu/drm/vmwgfx/vmwgfx_kms.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/gpu/drm/vmwgfx/vmwgfxkms.c kernel module in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

USN-7517-3 linux-bluefield vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - Block layer subsystem; - Drivers core; - Network block device driver;...

USN-7516-6 linux-ibm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - Block layer subsystem; - Drivers core; - Network block device driver;...

Ubuntu 24.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-7524-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7524-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...

The vulnerability of the gfx_v11_0_hw_init() function in the DRI support driver for AMD GPU cores in Linux operating systems allows a hacker to cause a system failure.

The vulnerability of the gfxv110hwinit function in the DRI support driver for AMD GPU cores in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the module drivers/gpu/drm/v3d/v3d_submit.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/gpu/drm/v3d/v3dsubmit.c kernel module of the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the module drivers/gpu/drm/v3d/v3d_submit.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/gpu/drm/v3d/v3dsubmit.c kernel module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-43701

Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...

CVE-2024-43702

Software installed and run as a non-privileged user may conduct improper GPU system calls to allow unprivileged access to arbitrary physical memory page...