amdgpu_dm create_validate_stream_for_sink DoS

Vulnerability of the createvalidatestreamforsink function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudm.c file – The driver that supports AMD GPU Direct Rendering Infrastructure DRI in Linux operating systems is vulnerable due to a pointer issue. Exploiting this vulnerability could allow a...

AZL-71662 CVE-2025-40289 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM Otherwise accessing them can cause a crash...

DEBIAN-CVE-2025-40289

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM Otherwise accessing them can cause a crash...

CVE-2025-40289 drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM Otherwise accessing them can cause a crash...

CVE-2025-40289 drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM Otherwise accessing them can cause a crash...

CVE-2025-40277 drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing an out-of-bounds access...

CVE-2025-40277

CVE-2025-40277 is a Linux kernel vulnerability affecting the DRM vmwgfx driver. The issue arises from validating the command header size against SVGA_CMD_MAX_DATASIZE, where user-supplied data used in buffer offset calculations could overflow and lead to an out-of-bounds access. Connected sources...

CVE-2025-40277 drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing an out-of-bounds access...

CVE-2025-40277

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing an out-of-bounds access...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from drm vmwgfx not validating command header sizes, which could result in a buffer overflow...

PT-2026-2597

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The open parameters in the drm/xe/oa module did not validate the num syncs value, potentially allowing userspace to provide excessively large values. This could lead to excessive memory...

drm/xe/guc Linux Component Data Compromise

The vulnerability of the drm/xe/guc component in the Linux operating system is related to improper checking or processing of exceptional states. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

UBUNTU-CVE-2025-40247

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix pgtable prealloc error path The following splat was reported: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010 Mem abort info: ESR = 0x0000000096000004 EC = 0x25: DABT current EL, ...

CVE-2025-40247 drm/msm: Fix pgtable prealloc error path

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix pgtable prealloc error path The following splat was reported: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010 Mem abort info: ESR = 0x0000000096000004 EC = 0x25: DABT current EL, ...

CVE-2025-40247

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix pgtable prealloc error path The following splat was reported: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010 Mem abort info: ESR = 0x0000000096000004 EC = 0x25: DABT current EL, ...

PT-2026-38944

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/v3d component where the max seg size is not set when using V3D rendering with CONFIG DMA API DEBUG enabled. This causes the kernel to default to a 64K segment...

AMD DRI Driver Heap Buffer Overflow DoS

The vulnerability in determining the structure of debugdefaultsdrv in the drivers/gpu/drm/amd/display/dc/resource/dcn35/dcn35resource.c file affects Linux kernel-based AMD graphics cards. This vulnerability is related to synchronization errors when using a shared resource. Exploiting this...

dcn21 HWSeq Buffer Overflow DoS

Vulnerability of the dcn21setabmimmediatedisable function in the drivers/gpu/drm/amd/display/dc/dcn21/dcn21HWSeq.c module – Drivers that support Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems are vulnerable due to a pointer manipulation issue. Exploiting thi...

mtk_crtc. Heap Buffer Overflow DoS

Vulnerability of the mtkcrtcDestroy function in the drivers/gpu/drm/mediatek/mtkcrtc.c module – Drivers that support Direct Rendering Infrastructure DRI for Mediatek graphics cards in Linux operating systems are vulnerable due to a pointer manipulation issue. Exploiting this vulnerability could...

AMD Graphics DRI dcn10_set_drr() DoS

Vulnerability of the dcn10setdrr function in the drivers/gpu/drm/amd/display/dc/hwss/dcn10/dcn10hwseq.c module – The drivers that support Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems are vulnerable due to a pointer manipulation issue. Exploiting this...