PT-2024-32875 · Imagination Technologies · Graphics Ddk

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows software installed and run as a non-privileged user to make GPU system calls, potentially reading and writing freed physical memory from the GPU. This could lead to...

drm/radeon: Fix encoder->possible_clones

...

drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported

...

drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()

...

drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA

...

CLSA-2024-1733483766 Fix of 9 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-49992 - drm: remove all control node code - drm: add managed resources tied to drmdevice - drm: Set finalkfree in drmdevalloc - drm/plane: add drmmuniversalplanealloc - drm: Handle dev-unique with drmm - drm: Use drmm for drmdevinit cleanup - drm:...

The vulnerabilities of DRM/MSM/A6XX components in Linux kernel, which allow a hacker to trigger a service failure

The vulnerability of DRM/MSM/A6XX components in the Linux operating system is related to reading data outside of the allowed range. Exploiting this vulnerability can allow a hacker to cause service failures...

UBUNTU-CVE-2024-53132

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix "Missing outer runtime PM protection" warning Fix the following drmWARN: 953.586396 xe 0000:00:02.0: drm Missing outer runtime PM protection ... 953.587090 ? xepmruntimegetnoresume+0x8d/0xa0 xe 953.587208...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a missing external runtime PM protection warning in the drm/xe driver...

The vulnerability of components related to DRM/AMD/AMDKFD in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/AMD/AMDKFD component in Linux operating systems is related to improper initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the drm_sched_entity_kill_jobs() function in the Linux operating system allows a hacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the drmschedentitykilljobs function in the drivers/gpu/drm/scheduler/schedentity.c file of the Linux operating system is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow a remote attacker to compromise the...

Imagination GPU Driver 安全漏洞

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver that originates from software installed and run as an unprivileged user that may make improper GPU system calls to enable unauthorized reads and writes to physical memory of the...

CVE-2024-11691

Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple's GPU driver. This bug only affected the application on Apple M series hardware. Other platforms were unaffected. This vulnerability affects Firefox 13...

Vulnerability of components such as DRM, AMDGPU, and system kernel firewalls in Linux operating systems, which can be exploited by attackers to cause service failures.

The vulnerability of components such as DRM, AMDGPU, and the operating system kernel’s Fence function in Linux is related to the assignment of the NULL pointer in the amdgpufencedriverswfini function. Exploiting this vulnerability can allow a hacker to cause a service failure...

The vulnerability of DRM/VMWGFX components in Linux operating systems allows attackers to increase their privileges within the system.

The vulnerability of DRM/VMWGFX components in Linux operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...

The vulnerability of the DRM/GMA500 components of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the DRM/GMA500 components in Linux operating systems is related to incorrect blocking in the gmacrtcpageflip function. Exploiting this vulnerability can allow a hacker to trigger a service failure...

The vulnerability of components related to DRM/Nouveau kernels in Linux operating systems, which allows a hacker to trigger a service failure.

The vulnerability of components of the DRM/Nouveau kernel in the Linux operating system is related to incorrect blocking in the nouveaugemioctlpushbuf function. Exploiting this vulnerability can allow a hacker to trigger a service failure...

Imagination GPU Driver 安全漏洞

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver DDK24.2 RTM1 and earlier versions, which originates from software installed and run as an unprivileged user, and may make improper GPU system calls to access the graphics buffer...

The vulnerability of the amdgpu_job_free_cb() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amdgpujobfreecb function in the drivers/gpu/drm/amd/amdgpu/amdgpujob.c file of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

The vulnerability of the xe_vm_create_ioctl() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xevmcreateioctl function in the drivers/gpu/drm/xe/xevm.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...