amdgpu_vram_mgr_new Heap Buffer Overflow DoS

The vulnerability of the amdgpuvrammgrnew function in the drivers/gpu/drm/amd/amdgpu/amdgpuvrammgr.c driver module related to AMD GPU cores in Linux operating systems is associated with synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to caus...

Google Chrome < 146.0.7680.177 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 146.0.7680.177. It is, therefore, affected by multiple vulnerabilities as referenced in the 202603stable-channel-update-for-desktop31 advisory. - Use after free in Compositing in Google Chrome prior to 146.0.7680.178...

PT-2026-38178

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.96 Description A use after free issue in the GPU component allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Use after...

PT-2026-29450

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.178 Description A heap buffer overflow exists in the GPU component of Google Chrome. This issue allows a remote attacker to execute arbitrary code by using a specially crafted HTML page. Recommendatio...

PT-2026-46550

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description Insufficient validation of untrusted input in the GPU component on Windows allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via ...

PT-2026-41110

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.168 Description A use after free issue in the GPU component allows a remote attacker to execute arbitrary code within a sandbox by utilizing a specially crafted HTML page. Use after free is a memory...

Linux Distros Unpatched Vulnerability : CVE-2026-23338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings Userspace can either deliberately pass in the too small numfences, or the required...

JesterSploit

JesterSploit – Advanced WiFi Penetration Testing Framework !...

amdgpu_userq_walk_and_Drop_fence_drv Heap Buffer Overflow DoS

The vulnerability of the amdgpuuserqwalkand Dropfencedrv function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserqfence.c driver for AMD GPU cores in Linux operating systems is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow ...

CVE-2026-22163

Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to arbitrary physical memory pages. The product utilises a shared resource in a concurrent manner but does not attempt t...

CVE-2026-0108

The register protection of the PowerVR GPU is incorrectly configured. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-99459

Name of the Vulnerable Software and Affected Versions Contrast versions prior to 1.18.0 Description The guest kernel's ACPI/AML handling is susceptible to an AML injection attack known as BadAML. ACPI tables containing AML bytecode are transmitted from the untrusted host QEMU to the guest firmwar...

PT-2026-41107

Name of the Vulnerable Software and Affected Versions Google Chrome on Linux versions prior to 148.0.7778.168 Description An out of bounds read in the GPU allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page. An out of bounds read...

amdgpu_amdkfd_gpuvm_import_dmabuf Heap Buffer Overflow DoS

The vulnerability of the amdgpuamdkfdgpuvmimportdmabuf function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to improper memory release. Exploiting this vulnerability can all...

Linux DRI MDP5 Pipe Overflow DoS

The vulnerability of the mdp5pipeassign function in the drivers/gpu/drm/msm/disp/mdp5/mdp5pipe.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernels, is related to incorrect resource initialization. Exploiting this vulnerability can allow an attacker to cause system...

USN-8098-8 linux-azure-fips vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

USN-8098-8: Linux kernel (Azure FIPS) vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

USN-8098-7 linux-azure vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

UBUNTU-CVE-2026-23390

In the Linux kernel, the following vulnerability has been resolved: tracing/dma: Cap dmamapsg tracepoint arrays to prevent buffer overflow The dmamapsg tracepoint can trigger a perf buffer overflow when tracing large scatter-gather lists. With devices like virtio-gpu creating large DRM buffers,...

CVE-2026-23338

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings Userspace can either deliberately pass in the too small numfences, or the required number can legitimately grow between the two calls to the userq wait...