CVE-2025-40152 drm/msm: Fix bootup splat with separate_gpu_drm modparam

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix bootup splat with separategpudrm modparam The drmgemforeachgpuvmbo call from lookupvma accesses drmgemobj.gpuva.list, which is not initialized when the drm driver does not support DRIVERGEMGPUVA feature. Enable it fo...

CVE-2025-40111 drm/vmwgfx: Fix Use-after-free in validation

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmwexecbufprocess. All nodes are expected to be cleared in...

CVE-2025-40110

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix a null-ptr access in the cursor snooper Check that the resource which is converted to a surface exists before trying to use the cursor snooper on it. vmwcmdrescheck allows explicit invalid SVGA3DINVALIDID...

kernel: drm/vkms: Fix use after free and double free on init error

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkmsexit function might access an uninitialized or freed defaultconfig pointer and it might double free it. Fix both possible erro...

AMD DRI Heap Buffer Overflow DoS

The vulnerability of the dmlcoremodesupport function in the drivers/gpu/drm/amd/display/dc/dml2/dml21/src/dml2core/dml2coredcn4calcs.c file of the DRI support driver for AMD GPU-based Linux operating system kernels is related to a numerical overflow vulnerability. Exploiting this vulnerability...

adreno_gpu_init Heap Buffer Overflow DoS

The vulnerability of the adrenogpuinit function in the drivers/gpu/drm/msm/adreno/adrenogpu.c file, a part of the Linux Direct Rendering Infrastructure DRI support driver, involves pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

dcn32_set_output_transfer_func() Function DRI DoS

The vulnerability of the dcn32setoutputtransferfunc function in the drivers/gpu/drm/amd/display/dc/dcn32/dcn32hwseq.c driver module of the Direct Rendering Infrastructure DRI support driver for AMD graphics cards in Linux operating systems is related to the use of pointers. Exploiting this...

dcn20_program_pipe() AMD Graphics DRI DoS

The vulnerability of the dcn20programpipe function in the drivers/gpu/drm/amd/display/dc/dcn20/dcn20hwseq.c driver module related to the Direct Rendering Infrastructure DRI of AMD graphics cards in Linux operating systems is associated with pointer aliasing. Exploiting this vulnerability could...

drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hw

The vulnerability of the dcn401setoutputtransferfunc function in the drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401hwseq.c driver module of the Direct Rendering Infrastructure DRI support for AMD graphics cards in Linux operating systems is related to the use of pointers. Exploiting this...

drivers/gpu/drm/amd/display/dc/dcn32/dcn32_hwseq.c

The vulnerability of the dcn32inithw function in the drivers/gpu/drm/amd/display/dc/dcn32/dcn32hwseq.c driver module of the Direct Rendering Infrastructure DRI support driver for AMD graphics cards in Linux operating systems is related to the use of pointers. Exploiting this vulnerability could...

drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV

...

Linux Direct Rendering Infrastructure DoS

The vulnerability in the drivers/gpu/drm/vc4/vc4dsi.c driver of the Direct Rendering Infrastructure DRI support in the Linux operating system is related to incorrect resource blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

amdgpu_aca Function DoS

The vulnerability of the acabanksrelease function in the drivers/gpu/drm/amd/amdgpu/amdgpuaca.c driver module relates to the pointer manipulation in AMD GPU kernel support for Linux operating systems. Exploiting this vulnerability can allow an attacker to cause a service failure...

drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c

The vulnerability of the dcn30inithw function in the drivers/gpu/drm/amd/display/dc/dcn30/dcn30hwseq.c driver module of the Direct Rendering Infrastructure DRI support driver for AMD video cards in Linux operating systems is related to the use of pointers. Exploiting this vulnerability could allo...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990470)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990470 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga For pptable structs that use...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990479)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990479 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Return error code in mdp5piperelease when deadlock is detected mdp5getglobalstate...

CVE-2025-54335

An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1580, 2500. There is a use-after-free in the Xclipse GPU Driver...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990184 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix the null pointer dereference in applystateadjustrules Check the pointer value ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989880)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989880 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/plane: Move range check for formatcount earlier While the check for formatcount 64 in...

Samsung Mobile Processor Exynos security vulnerabilities

SAMSUNG Mobile Processor Exynos is a system-on-chip SoC from South Korea's Samsung SAMSUNG dedicated to smartphones and tablets. A security vulnerability exists in SAMSUNG Mobile Processor Exynos, which originates from a post-release reuse in the Xclipse GPU driver. The following products are...