CVE-2021-28663

CVE-2021-28663 A basic PoC leak for CVE-2021-28663 Internal of the Android kernel backdoor vulnerability This is a basic PoC for CVE-2021-28663. A design flaw in Mali GPU Android Kernel Driver. 1. Create a GPUVA and also mmap to it so we can get virtual addr for phys pages. 2. Create an alias for...

EUVD-2026-70857

Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause double free and kernel heap corruption. Scenario caused by fabricating a specific combination of flags on the allocation interface that woul...

The vulnerability of the v3d_rewrite_csd_job_wg_counts_from_indirect() function in the drivers/gpu/drm/v3d/v3d_sched.c driver of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the v3drewritecsdjobwgcountsfromindirect function in the drivers/gpu/drm/v3d/v3dsched.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...

The vulnerability of the require_uniform_address_uniform() function in the drivers/gpu/drm/vc4/vc4_validate_shaders.c driver module of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the requireuniformaddressuniform function in the drivers/gpu/drm/vc4/vc4validateshaders.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote...

CVE-2026-21007-GPU-Driver-ioctl-Race-Condition-Kernel-Memory-Mapping-

CVE-2026-21007 – Condición de carrera en el ioctl del controlador de GPU Mapeo de memoria del kernel Código del programa simulación en C root@kitploit: // gpudriversim.c - Simulated GPU driver ioctl with race condition include include include include void gpummap = NULL; sizet mapsize = 0; int...

CVE-2024-0070-NVIDIA-GPU-Driver--Resonance-Vulnerability

CVE-2024-0070-NVIDIA-GPU-Driver--Resonance-Vulnerability NVIDIA's GPU drivers have a temporal coherence flaw in their memory management. At 587 kHz resonance, the driver's memory pages experience α-decay interference, allowing kernel memory access from user space. NVIDIA GPU α-Resonance Exploit...

nvidia-gpu-security-poc

NVIDIA GPU 驱动程序 — NVIDIA 以“符合预期行为”关闭的两项发现 针对 NVIDIA Linux GPU 驱动程序中的两项发现的 PoC 代码和原始证据， 两项发现均通过 NVIDIA 的 VDP 提交，且均被 NVIDIA 以“符合预期/预期行为”为由关闭。 发布本文档旨在使该行为有据可查且可复现；两项发现均无 CVE 编号，且均不会被修复。 | 发现| 类别| 厂商结论| 目录 ---|---|---|---|--- 1| 通过 NVML 实现跨 UID GPU 进程遥测| 信息泄露（CWE-200 / CWE-862）| “符合预期行为”；已于 2026-08-2...

CVE-2026-80618

A flaw was found in the kernel's AMD GPU driver drm/amdkfd. This vulnerability occurs when the driver attempts to unpin a memory buffer object BO twice during memory deallocation. A local attacker could exploit this double-unpin operation, leading to a memory management error. This issue can caus...

The vulnerability of the pqm_update_queue_properties() function in the drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c file of the Direct Rendering Infrastructure (DRI) driver for AMD kernel-based Linux operating systems allows a attacker to compromise the accessibility of protected information.

The vulnerability of the pqmupdatequeueproperties function in the drivers/gpu/drm/amd/amdkfd/kfdprocessqueuemanager.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems leads to unmanageable resource consumption. Exploiting this vulnerability...

The vulnerability of the xe_nvm_init() function in the drivers/gpu/drm/xe/xe_nvm.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xenvminit function in the drivers/gpu/drm/xe/xenvm.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the i915_fence_release() function in the Linux kernel’s drivers/gpu/drm/i915/i915_request.c module allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the i915fencerelease function in the Linux kernel’s drivers/gpu/drm/i915/i915request.c module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the pvr_power_reset() function in the drivers/gpu/drm/imagination/pvr_power.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the pvrpowerreset function in the drivers/gpu/drm/imagination/pvrpower.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a...

EUVD-2026-64575

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues BIN, RENDER, TFU and CSD but has only a single, global reset. A timeout on any one queue therefore has to stop, reset and restart t...

CVE-2026-74454

A flaw was found in the Linux kernel's drm/vc4 component. An out-of-bounds write vulnerability exists where the graphics processing unit GPU driver incorrectly calculates memory allocation sizes. This allows the GPU to write data beyond its allocated memory region during out-of-memory events. Thi...

CVE-2026-45202

Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free even...

EUVD-2026-63809

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 page size could lead to 4K pages being treated a...

PT-2026-79295

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 page size could lead to 4K pages being treated a...

CVE-2026-74380

A flaw was found in the Linux kernel's host1x GPU driver. An incorrect return value check in the iommumapsgtable function, coupled with an improper integer assignment in pinjob, could lead to negative value overflows. This vulnerability may result in data integrity issues or system instability...

Linux Distros Unpatched Vulnerability : CVE-2026-74353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: always resumeall after suspendall Need to restore any good queues even if the suspendall failed for some. Always run removequeue as that will schedu...

RHEL 8 : kernel-rt (RHSA-2026:55765)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55765 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...