27842 matches found
PT-2026-45985
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/panthor component where the memory subsystem can become blocked, causing flush operations to never complete. This state can be triggered by buggy GPU jobs...
NVIDIA GPU Display Driver DoS
The vulnerability of the Video Decoder component in the NVIDIA GPU Display Driver software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to access protected information or cause system failures...
NVIDIA GPU Display Driver DoS
The vulnerability of the NVIDIA GPU Display Driver software driver is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a system failure...
Virtual GPU Manager Driver Unauthorized Access
The vulnerability of the Virtual GPU Manager driver component of NVIDIA’s Virtual GPU technology relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures...
CVE-2025-58410
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource...
USN-7887-2: Linux kernel (Raspberry Pi) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...
Fedora 43 : webkitgtk (2025-6f3e9e3af6)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-6f3e9e3af6 advisory. Prevent unsafe URI schemes from participating in media playback. Make jscvaluearraybuffergetdata function introspectable. Fix logging in to Google...
USN-7887-1 linux-raspi-realtime vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...
USN-7887-1: Linux kernel (Raspberry Pi Real-time) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...
Ubuntu 16.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-7875-1)
"The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7875-1 advisory. Jean-Claude Graf, Sandro Regge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation betwe...
USN-7875-1: Linux kernel (Oracle) vulnerabilities
Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...
CVE-2025-58407
Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine...
CVE-2025-58407 GPU DDK - TOCTOU bug affecting psFWMemContext->uiPageCatBaseRegSet
Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine...
CVE-2025-58407
Kernel or driver software installed on a Guest VM is vulnerable to a TOCTOU (Time-of-Check Time-of-Use) race condition when posting commands to the GPU Firmware . This vulnerability specifically affects psFWMemContext->uiPageCatBaseRegSet . Successful exploitation could allow an attacker to tr...
Collaborative research by Microsoft and NVIDIA on real-time immunity
AI-Powered Threats Demand AI-Powered Defense While AI supports growth and innovation, it is also reshaping how organizations address faster, more adaptive security risks. AI-driven security threats, including “vibe-hacking”, are evolving faster than traditional defenses can adapt. Attackers can n...
CVE-2025-58407: Time-of-check Time-of-use (TOCTOU) Race Condition
Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine...
CVE-2025-58410: Improper Handling of Insufficient Permissions or Privileges
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource...
PT-2025-47174
Name of the Vulnerable Software and Affected Versions versions prior to 2025 Description Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware, potentially exploiting a TOCTOU race condition. This could lead to a read and/or write of data outside the...
a3xx_gpu_init Heap Buffer Overflow DoS
The vulnerability of the a3xxgpuinit function in the drivers/gpu/drm/msm/adreno/a3xxgpu.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernels, is related to the absence of a standardized error-handling mechanism. Exploiting this vulnerability could allow an attacker...
NVIDIA GPU Display Driver Memory Reclamation Privilege Escalation
The vulnerability of the NVIDIA GPU Display Driver is related to a memory reclamation error. Exploiting this vulnerability allows an attacker to cause system failures, gain elevated privileges, execute arbitrary code, forge and disclose sensitive information...