amdgpu_dpm_force_performance_level Heap Buffer Overflow DoS

The vulnerability of the amdgpudpmforceperformancelevel function in the drivers/gpu/drm/amd/pm/amdgpudpm.c file of the Direct Rendering Infrastructure DRI support driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow...

Direct Rendering Infrastructure GPU Function Compromise

The vulnerability of the xevmbindiocl function in the drivers/gpu/drm/xe/xevm.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the reallocation of previously released memory. Exploiting this vulnerability could allow an attacker to compromise...

amdgpu_userq_restore_worker Heap Buffer Overflow DoS

The vulnerability of the amdgpuuserqrestoreworker function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserq.c driver of the Direct Rendering Infrastructure DRI module for AMD GPU cores in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this...

Linux Kernel Vulnerability Confidential Data Compromise

The vulnerability of the drivers/gpu/drm/vmwgfx cores in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Direct Rendering Infrastructure AMD GPU dcn303_stream_encoder_create Heap Buffer Overflow

The vulnerability of the dcn303streamencodercreate function in the drivers/gpu/drm/amd/display/dc/dcn303/dcn303resource.c file, a driver for the Direct Rendering Infrastructure DRI of AMD video cards, related to Linux operating systems, involves reading beyond the buffer boundaries. Exploiting th...

ttm_bo_validate Heap Buffer Overflow DoS

The vulnerability of the ttmbovalidate function in the drivers/gpu/drm/ttm/ttmbo.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Microsoft Graphics Component code-related vulnerabilities

The Microsoft Graphics Component is a graphics driver component developed by Microsoft Corporation. There are code-related vulnerabilities in the Microsoft Graphics Component. Attackers can exploit these vulnerabilities to cause system denial-of-service attacks. The following products and version...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005659)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005659 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Don't leak some plane state Apparently no one noticed that mdp5 plane states leak...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005734)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005734 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Free resources after unregistering them The DP component's unbind operation walks...

Direct Rendering Infrastructure Heap Buffer Overflow DoS

The vulnerability of the vkmsinit function in the drivers/gpu/drm/vkms/vkmsdrv.c file, a driver for the Direct Rendering Infrastructure DRI of the Linux kernel, is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failur...

AMD DRI Graphics Heap Buffer Overflow DoS

The vulnerability of the svmrangerestorepages function in the driver/gpu/drm/amd/amdkfd/kfdsvm.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to the improper disabling or release of resources. Exploiting this vulnerability may...

Direct Rendering Infrastructure AMD GPU Buffer Overflow DoS

The vulnerability of the dcn30clocksourcecreate function in the drivers/gpu/drm/amd/display/dc/dcn314/dcn314resource.c file, a part of the Direct Rendering Infrastructure DRI driver for AMD video cards in Linux operating systems, is related to improper memory release mechanisms memory leaks...

AMD SMM code execution

The vulnerability of AMD’s SMM microprogramming graphics processor driver is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2026-39061

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the drm/amdgpu component where the amdgpu userq signal ioctl function lacks proper upper bound checks on user inputs. Providing excessively large input values can lead t...

CVE-2026-23213

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Disable MMIO access during SMU Mode 1 reset During Mode 1 reset, the ASIC undergoes a reset cycle and becomes temporarily inaccessible via PCIe. Any attempt to access MMIO registers during this window e.g., from...

Linux Distros Unpatched Vulnerability : CVE-2026-23213

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/pm: Disable MMIO access during SMU Mode 1 reset During Mode 1 reset, the ASIC undergoes a reset cycle and becomes temporarily inaccessible via PCIe. Any...

CVE-2025-32453

Incorrect default permissions for some IntelR Graphics Driver software within Ring 2: Privileged Process may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may...

NVIDIA Graphics Driver Pointer Aliasing DoS

The vulnerabilities of NVIDIA’s graphics driver families—NVS, Quadro, NVIDIA RTX, GeForce—are related to pointer manipulation. Exploiting these vulnerabilities can allow attackers to trigger service failures...

UBUNTU-CVE-2026-23163

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix NULL pointer dereference in amdgpugmcfilterfaultsremove On APUs such as Raven and Renoir GC 9.1.0, 9.2.2, 9.3.0, the ih1 and ih2 interrupt ring buffers are not initialized. This is by design, as these secondary IH...

CVE-2026-23163

The CVE-2026-23163 issue is a Linux kernel vulnerability in the amdgpu driver where APUs (Raven/Renoir) with noretry path could trigger a NULL pointer dereference in amdgpu_gmc_filter_faults_remove using uninitialized ih1 ring data. The root cause was ih1/ih2 not being initialized on APUs (second...