9733 matches found
CVE-2026-43195 drm/amdgpu: validate user queue size constraints
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate user queue size constraints Add validation to ensure user queue sizes meet hardware requirements: - Size must be a power of two for efficient ring buffer wrapping - Size must be at least AMDGPUGPUPAGESIZE to...
CVE-2026-43195
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate user queue size constraints Add validation to ensure user queue sizes meet hardware requirements: - Size must be a power of two for efficient ring buffer wrapping - Size must be at least AMDGPUGPUPAGESIZE to...
CVE-2026-43195
CVE-2026-43195 affects the Linux kernel component drm/amdgpu related to user queue size handling. The issue is resolved by adding validation to ensure user queue sizes meet hardware requirements: the size must be a power of two for correct ring-buffer wrapping and at least AMDGPU_GPU_PAGE_SIZE to...
CVE-2026-43195
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate user queue size constraints Add validation to ensure user queue sizes meet hardware requirements: - Size must be a power of two for efficient ring buffer wrapping - Size must be at least AMDGPUGPUPAGESIZE to...
Rowhammer Attack Against NVIDIA Chips
A new rowhammer attack gives complete control of NVIDIA CPUs. On Thursday, two research teams, working independently of each other, demonstrated attacks against two cards from Nvidia’s Ampere generation that take GPU rowhammering into new--and potentially much more consequential--territory: GDD...
PT-2026-37535
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw in the drm/amdgpu component allows for invalid user queue size configurations. The system fails to validate that queue sizes are a power of two for efficient ring buffer wrapping...
KLA91053 Multiple vulnerabilities in Opera
Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Codecs can be exploited remotely to execute arbitrary code. ...
Linux Distros Unpatched Vulnerability : CVE-2026-43195
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: validate user queue size constraints Add validation to ensure user queue sizes meet hardware requirements: - Size must be a power of two for efficie...
PT-2026-38148
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.96 Description An uninitialized use in the GPU allows a remote attacker who has compromised the renderer process to obtain potentially sensitive information from process memory through a crafted HTML...
PT-2026-38178
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.96 Description A use after free issue in the GPU component allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Use after...
Google Chrome 安全漏洞
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.96 contained a security vulnerability. This vulnerability stemmed from the uninitialized use of GPU resources, which could allow remote attackers to exploit the system by leaking cross-source dat...
Google Chrome 安全漏洞
Google Chrome is a web browser developed by the American company Google. Versions of Google Chrome prior to 148.0.7778.96 contained a security vulnerability caused by GPU integer overflow. This vulnerability could allow remote attackers to execute arbitrary read and write operations through...
openSUSE 16 Security Update : chromium (openSUSE-SU-2026:20660-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20660-1 advisory. Changes in chromium: - Chromium 147.0.7727.137 boo1263158 CVE-2026-7363: Use after free in Canvas CVE-2026-7361: Use after free in iOS...
CVE-2026-24082 Use After Free in Automotive GPU
Memory Corruption when copying data from a freed source while executing performance counter deselect operation...
CVE-2026-24082 Use After Free in Automotive GPU
Memory Corruption when copying data from a freed source while executing performance counter deselect operation...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: drm/msm/a3xx: Fixed error handling in a3xxgpuinit. These error paths now return 1 on failure, instead of a negative error code. This could lead to an Oops in the calling function. Another issue is that the check for "if ret !=...
Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: drm/i915/gvt: fixed the issue where vGPU debugfs was cleaned up during the remove operation. Check carefully whether the root debugfs is available when destroying the vGPU. For example, in the remove operation, the DRM minor’s...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: drm/amdkfd: Fixed a memory leak in the createprocess failure scenario. Fixed a memory leak caused by a leaked mmget reference in a error handling code path, which occurs when attempting to create KFD processes while a GPU rese...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: The calltrace warning in amddrmbuddyfini has been fixed. The following call trace was observed when removing the amdgpu driver. This issue arises because the BOs allocated for PSP are not freed until after the driver ...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: drm/virtio: fixed a NULL pointer derefrence in virtiogpuconngetmodes drmcvtmode may return NULL, and we should check for this. This bug was discovered by syzkaller: FAULTINJECTION stacktrace: 168.567394 FAULTINJECTION: forcing...