CVE-2026-63884

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential UAF in TTM object purge TLDR: The bo-ttm object might be changed by calling ttmbovalidate, move casting it to an i915tt object later to actually get the right pointer. A user reported hitting the following...

CVE-2026-63880 drm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_OP_GET_MAPPING_INFO

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix lock leak on ENOMEM in AMDGPUGEMOPGETMAPPINGINFO The AMDGPUGEMOPGETMAPPINGINFO branch of amdgpugemopioctl holds three cleanup-tracked resources before calling kvcalloc: the drmgemobject reference from...

CVE-2026-63856

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set nouserfence for VCN v2.0 enc/dec rings VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit...

PT-2026-61417

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.0.0 Description A circular locking dependency exists in the drm/msm component of the Linux kernel. When VM reclaim pressure occurs, the kswapd0 process holding the fs reclaim lock calls the MSM shrinker, which subsequent...

PT-2026-61158

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/jpeg component where JPEG v5.0.1 rings do not support 64-bit user fence writes. This leads to a failure to reject Command Stream CS submissions that...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: CVE-2026-31771: Bluetooth: hcievent: move wake reason storage into validated event handlers bsc1264145. CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach...

CVE-2026-7639

The GPU DDK is vulnerable to a use after free (UAF) condition in the PMMETA_PROTECT heap memory. A non-privileged user can execute a sequence of improper GPU system calls to trigger a failure path in the MMU mapping logic , resulting in incomplete cleanup of an internal driver state. This allows ...

CVE-2026-34196 GPU DDK - UAF read and/or write of arbitrary physical memory due to integer truncation in PMRDevPhysAddrOSMem

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addresses to the same physical address. One of these virutal mappings can be freed along with the physical page, allowing for a read/write UAF via the...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues The following security issues were fixed: CVE-2026-31771: Bluetooth: Ignore HCIERRORCANCELLEDBYHOST on adv set terminated event bsc1264145. CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach...

AMD GPU DRI Kernel Heap Buffer Overflow DoS

The vulnerability of the svmmigratetoram function in the drivers/gpu/drm/amd/amdkfd/kfdmigrate.c file, a driver for supporting Direct Rendering Infrastructure DRI in AMD graphics cards for Linux operating systems, is related to the assignment of the NULL pointer. Exploiting this vulnerability cou...

amdgpu_cs parser_init() Heap Buffer Overflow DoS

The vulnerability of the amdgpucs parserinit function in the drivers/gpu/drm/amd/amdgpu/amdgpucs.c driver module relates to the pointer manipulation in the AMD GPU kernel support for Linux operating systems. Exploiting this vulnerability can allow an attacker to cause a service failure...

vmwgfx Heap Buffer Overflow DoS

The vulnerability of the vmwkmscursorsnoop function in the drivers/gpu/drm/vmwgfx/vmwgfxkms.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a...

Direct Rendering Infrastructure AMD GPU alloc_event_waiters Heap Buffer Overflow DoS

The vulnerability of the alloceventwaiters function in the drivers/gpu/drm/amd/amdkfd/kfdevents.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to improper initialization. Exploiting this vulnerability could allow an attacker t...

Direct Rendering Infrastructure AMD GPU Heap Buffer Overflow DoS

The vulnerability of the dcgetdetbuffersizefromstate function in the drivers/gpu/drm/amd/display/dc/core/dc.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an...

ROS-20260702-73-0003

The vulnerability of the amdgpuringfini function in the drivers/gpu/drm/amd/amdgpu/amdgpuring.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this...

ROS-20260702-73-0028

The vulnerability of the mdp5planeDestroyState function in the drivers/gpu/drm/msm/disp/mdp5/mdp5plane.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability could allow an...

drivers/gpu/drm/amd/display/dc/dce/dce_clock_source.c Heap

The vulnerability of the getpixelclkfrequency100hz function in the drivers/gpu/drm/amd/display/dc/dce/dceclocksource.c driver, which supports Direct Rendering Infrastructure DRI in Linux kernel, is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an...

NVIDIA Graphics Driver Use-After-Free

The vulnerabilities of NVIDIA’s graphics driver families—NVS, Quadro, NVIDIA RTX, GeForce—are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

CVE-2026-53356

CVE-2026-53356 concerns the Linux kernel’s DRM i915 GEM phys BO handling. The issue stems from sg_page() returning a struct page pointer instead of a void*, which makes pread/pwrite offset scaling incorrect and risks accessing inappropriate parts of the BO when a non-zero offset is used. The vuln...

CVE-2026-53356 drm/i915/gem: Fix phys BO pread/pwrite with offset

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with offset sgpage returns struct page pointer not void so the scaling of pread/pwrite is wrong for phys BO and wrong parts of BO would be accessed if non-zero offset is used. Last impacted...