AMD Graphics DRI dcn35_set_drr Heap Buffer Overflow DoS

Vulnerability of the dcn35setdrr function in the drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35hwseq.c module – Drivers that support Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems are vulnerable due to the reliance on pointer manipulation. Exploiting this...

Linux DRI Panthor Device Mmap I/O Buffer Overflow DoS

Vulnerability of the panthordevicemmapio function in the drivers/gpu/drm/panthor/panthordevice.c module – The driver for Linux’s Direct Rendering Infrastructure DRI has vulnerabilities related to authentication procedures. Exploiting this vulnerability could allow an attacker to cause service...

CVE-2025-58408 GPU DDK - KASAN Read UAF in the PVRSRVBridgeRGXSubmitTransfer2 due to improper error handling code

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to kernel exceptions and write use-after-free. The Use After Free common weakness enumeration was chosen as the stale data can include handles to resources in whi...

drm/msm: Make .remove and .shutdown HW shutdown consistent

...

drm/amdgpu: fix calltrace warning in amddrm_buddy_fini

...

AMD Xilinx Run Time security vulnerabilities

AMD XOCL driver is a driver developed by AMD for OpenCL Open Computing Language, which is mainly used to support the performance optimization of AMD's GPUs in heterogeneous and parallel computing tasks. An improper input validation vulnerability exists in AMD XOCL driver, which can be exploited b...

AMD GPU Direct Rendering Infrastructure Heap Buffer Overflow DoS

The vulnerability of the gmcv100hwfini function in the drivers/gpu/drm/amd/amdgpu/gmcv100.c driver module relates to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability can allow an attacker to cause a service failure...

AMD GPU DRI DoS

The vulnerability of the svmmigrateinit function in the drivers/gpu/drm/amd/amdkfd/kfdmigrate.c file, a driver for supporting Direct Rendering Infrastructure DRI in AMD graphics cards for Linux operating systems, is related to improper resource management. Exploiting this vulnerability can allow ...

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-2447)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : KVM: VMX: Do all initialization before exposing /dev/kvm to userspaceCVE-2022-49932 drivers:md:fix a potential use-after-free bugCVE-2022-50022...

drm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()`

...

CVE-2025-58410

Software running as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only . The root cause is the improper handling of memory protections for the buffer resource. Specifically, multiple calls into PhysmemGEMPrimeExport can re...

amdgpu_dmdebugfs Heap Buffer Overflow DoS

The vulnerability in the capabilitiesshow function of the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c driver of the Direct Rendering Infrastructure DRI support for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allo...

AMD Graphics DRI DoS

The vulnerability of the optc32disablecrtc function in the drivers/gpu/drm/amd/display/dc/dcn32/dcn32optc.c driver module related to AMD graphics cards for Linux operating systems is associated with a numerical overflow. Exploiting this vulnerability could allow an attacker to cause a service...

CVE-2025-40166

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Check GuC running state before deregistering exec queue In normal operation, a registered exec queue is disabled and deregistered through the GuC, and freed only after the GuC confirms completion. However, if the driv...

Linux Distros Unpatched Vulnerability : CVE-2025-40152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix bootup splat with separategpudrm modparam The drmgemforeachgpuvmbo call from...

CVE-2025-40191 drm/amdkfd: Fix kfd process ref leaking when userptr unmapping

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix kfd process ref leaking when userptr unmapping kfdlookupprocessbypid hold the kfd process reference to ensure it doesn't get destroyed while sending the segfault event to user space. Calling kfdlookupprocessbypid ...

UBUNTU-CVE-2025-40148

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer checks in dcstream cursor attribute functions The function dcstreamsetcursorattributes currently dereferences the stream pointer and nested members stream-ctx-dc-currentstate without checking for...

CVE-2025-40166 drm/xe/guc: Check GuC running state before deregistering exec queue

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Check GuC running state before deregistering exec queue In normal operation, a registered exec queue is disabled and deregistered through the GuC, and freed only after the GuC confirms completion. However, if the driv...

CVE-2025-40166

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Check GuC running state before deregistering exec queue In normal operation, a registered exec queue is disabled and deregistered through the GuC, and freed only after the GuC confirms completion. However, if the driv...

CVE-2025-40152

MODE C Summary: CVE-2025-40152 affects the Linux kernel DRM MSM driver. The root cause is an uninitialized drm_gem_obj.gpuva.list when the driver does not advertise DRIVER_GEM_GPUVA, leading to a crash during bootup (kernel oops) in MSM’s DRM/KMS init path and related fbdev/plane initialization. ...