CVE-2026-98784

A flaw was found in the AMD GPU driver within the Linux kernel. During graphics block teardown, the driver fails to release previously loaded microcode firmware resources. A local user could exploit this behavior through repeated device re-initialization and teardown operations, resulting in a...

CVE-2026-98780

A flaw was found in the Linux kernel's AMD GPU driver. When registering hardware discovery entries within the sysfs system filesystem interface, the driver fails to release allocated memory if a kernel object fails to register. An unexpected registration failure can cause the memory to remain...

CVE-2021-28663

CVE-2021-28663 A basic PoC leak for CVE-2021-28663 Internal of the Android kernel backdoor vulnerability This is a basic PoC for CVE-2021-28663. A design flaw in Mali GPU Android Kernel Driver. 1. Create a GPUVA and also mmap to it so we can get virtual addr for phys pages. 2. Create an alias for...

CVE-2026-21007-GPU-Driver-ioctl-Race-Condition-Kernel-Memory-Mapping-

CVE-2026-21007 – GPU Driver ioctl Race Condition Kernel Memory Mapping Program Code C sim // gpudriversim.c - Simulated GPU driver ioctl with race condition include include include include void gpummap = NULL; sizet mapsize = 0; int locked = 0; void ioctlmapsizet size // Allocate GPU memory and m...

CVE-2024-0070-NVIDIA-GPU-Driver--Resonance-Vulnerability

CVE-2024-0070-NVIDIA-GPU-Driver--Resonance-Vulnerability NVIDIA's GPU drivers have a temporal coherence flaw in their memory management. At 587 kHz resonance, the driver's memory pages experience α-decay interference, allowing kernel memory access from user space. NVIDIA GPU α-Resonance Exploit...

nvidia-gpu-security-poc

NVIDIA GPU driver — two findings NVIDIA closed as expected behavior Proof-of-concept code and raw evidence for two findings in the NVIDIA Linux GPU driver, both reported through NVIDIA's VDP and both closed by NVIDIA as intended/expected behavior. Published so the behaviour is documented and...

CVE-2026-98609

A flaw was found in the Linux kernel's VirtIO GPU driver. When graphics buffer handle creation fails, the driver improperly handles object references, preventing cleanup functions from freeing allocated memory and host resources. A local attacker could exploit this vulnerability to trigger a...

CVE-2026-89812

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit driver. When the Multimedia Engine Scheduler MES ring stops responding and a system reset is triggered, the MES ring fences are not properly completed. This can lead to the system becoming unresponsive after resuming from the...

CVE-2026-98607

A flaw was found in the Linux kernel's VirtIO GPU driver. This vulnerability allows a local user to cause a denial of service DoS through memory and resource exhaustion. When errors occur during the creation of graphical resources, the driver fails to properly release object references, preventin...

CVE-2026-98606

A flaw was found in the Linux kernel's VirtIO GPU driver. During error handling when creating video memory resources, the driver deallocates memory without properly releasing the object from kernel memory tracking structures. A local user can exploit this vulnerability to trigger a use-after-free...

CVE-2026-93060

A flaw was found in the Linux kernel's Adreno GPU driver. This use-after-free vulnerability occurs in the a6xxgpuinit function. Specifically, the a6xxdestroy function frees the a6xxgpu memory, but adrenogpu continues to point to the freed memory. An attacker could potentially exploit this to caus...

CVE-2026-98566

A flaw was found in the Linux kernel's drm/imagination GPU driver. The driver fails to properly validate and bound the firmware reconstruction count against the fixed protocol array capacity when processing freelist reconstruction requests. A local attacker could exploit this vulnerability by...

CVE-2026-98522

A flaw was found in the Linux kernel's Imagination PowerVR GPU driver. This vulnerability allows a local user to cause a Denial of Service DoS by crashing the system. The issue occurs when the driver fails to properly return an error code after a memory mapping failure, allowing execution to...

CVE-2026-98511

A flaw was found in the Linux kernel's Nouveau GPU driver. When attempting to re-pin a memory buffer into an incompatible memory domain, the driver rejects the request but fails to prevent an increment of the buffer's pin count. Because callers do not unpin after an error, this causes an unbalanc...

CVE-2026-98508

A flaw was found in the Linux kernel's VirtIO GPU driver. This flaw allows a local user to cause a denial of service DoS by triggering a kernel crash. Under memory pressure, the driver fails to verify whether fence memory allocation succeeds during graphics command submission, leading to an...

CVE-2026-98404

A flaw was found in the Linux kernel's VirtIO GPU driver. A local user could exploit this flaw to cause a Denial of Service DoS by triggering a system crash. When user framebuffer creation encounters an error, the driver improperly returns a null value instead of an error code, resulting in a nul...

CVE-2026-90286

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit driver, specifically affecting GFX6 series GPUs. This vulnerability stems from incorrect handling of the Pre-Fetch Parser PFP on compute queues, which can lead to synchronization issues. An attacker could potentially exploit...

CVE-2026-98270

A flaw was found in the Linux kernel's AMD GPU driver. The driver fails to verify that internal reliability and error-handling structures are initialized before accessing them during interrupt handling. If an interrupt occurs during this early startup window, the driver encounters a null pointer...

CVE-2026-98178

A flaw was found in the Linux kernel's AMD GPU driver. When compute subsystem initialization fails, uninitialized device structures remain attached to the graphics driver. A local user capable of triggering a GPU reset can cause the system to dereference an unallocated memory pointer, resulting i...

CVE-2026-98177

A flaw was found in the Linux kernel's AMD GPU driver amdkfd. A local user could trigger a Denial of Service DoS or system instability due to an integer underflow vulnerability during the calculation of the End of Pipe EOP ring buffer size. Under specific conditions, this improper calculation cou...