PT-2026-72789

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdkfd component where the system fails to consistently execute the resume all function after suspend all. This prevents the restoration of functional queues...

PT-2026-72284

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dma fence dedup array function where it returns 1 instead of 0 when called with the num fences variable equal to 0. This behavior occurs because the for-loop body...

CVE-2026-74353: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: always resumeall after suspendall Need to restore any good queues even if the suspendall failed for some. Always run removequeue as that will schedule a GPU reset is removing the queue fails. v2: move resumeall after...

keyhog v0.5.73-action

Website · Documentation · Architecture · Vyre GPU engine KeyHog: GPU-accelerated secret scanner for code, cloud, and CI KeyHog is an open-source secret scanner in Rust that finds and verifies leaked API keys, tokens, passwords, and credentials across source code, Git history, containers, cloud...

SUSE CVE-2026-68255

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: bound EDID block reads to the response buffer virtiogetedidblock validates the read offset only against the device-supplied resp-size field, never against the fixed-size resp-edid array. The EDID block index is driven...

SUSE CVE-2026-68260

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vmctx-lock before mapping memory to GPU VM The drm gpuvm code doesn't protect find operation against map operation, and the driver needs to ensure a map operation shouldn't happen when a find operation is...

SUSE CVE-2026-68263

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix double call to drmschedentityfini Call sequence of double call: pvrcontextdestroy pvrcontextkillqueues pvrqueuekill drmschedentitydestroy drmschedentityfini // here pvrcontextput...

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2026-5822 vulnerabilities

Vulnerabilities for packages: guac, gpu-operator-fips, kube-arangodb-fips, kube-arangodb, gpu-operator...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: elvish, octo-sts, direnv, dask-gateway, dockerize, kube-metrics-adapter-fips, kafkaexporter-fips, cloud-provider-aws, velero-plugin-for-aws, yunikorn-k8shim, vexctl, cluster-proportional-autoscaler, cluster-api-gcp-controller, tekton-pipelines, ytt-fips,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: elvish, octo-sts, direnv, dask-gateway, dockerize, kube-metrics-adapter-fips, kafkaexporter-fips, cloud-provider-aws, velero-plugin-for-aws, yunikorn-k8shim, vexctl, cluster-proportional-autoscaler, cluster-api-gcp-controller, tekton-pipelines, ytt-fips,...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: elvish, octo-sts, direnv, dask-gateway, dockerize, kube-metrics-adapter-fips, kafkaexporter-fips, cloud-provider-aws, velero-plugin-for-aws, yunikorn-k8shim, vexctl, cluster-proportional-autoscaler, cluster-api-gcp-controller, tekton-pipelines, ytt-fips,...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: elvish, dex, percona-server-mongodb-operator-fips, opa, direnv, aws-flb-firehose-fips, dask-gateway, dockerize, kafkaexporter-fips, cloud-provider-aws, velero-plugin-for-aws, yunikorn-k8shim, cluster-proportional-autoscaler, tekton-pipelines, ytt-fips,...

SUSE CVE-2026-68108

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: fix integer overflow in image size Fix a security vulnerability where malicious VCE command streams with oversized dimensions e.g. 65536x65536 cause 32-bit integer overflow, wrapping the calculated buffer size to ...

SUSE CVE-2026-68109

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma7.1: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit c4f230b51cf2d3e7e8b1c800331f3dbed2a9e3f5...

The vulnerability of the drivers/gpu/host1x components of the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the drivers/gpu/host1x components of the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-68447 drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size CRIU checkpoint copies the MQD control stack using cphqdcntlstacksize from hardware without bounding it to the allocated BO region. If the HW field is larger than...

CVE-2026-68445

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Prevent shader BO mappings from becoming writable vc4gemobjectmmap rejects a writable mapping of a validated shader BO, but leaves VMMAYWRITE set. Userspace can map the BO read-only and then turn it writable with mprotec...

DEBIAN-CVE-2026-68437

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fit paired fragment job in the correct CCCB For geometry jobs with a paired fragment job, at the moment, the DRM scheduler's preparejob callback: - checks for internal driver dependencies for the geometry job; -...