Linux kernel DRI Heap Buffer Overflow DoS

The vulnerability of the xemigratecopy function in the drivers/gpu/drm/xe/xebo.c module of the DRI support driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

DRI AMD GPU dc_state_create() Heap Buffer Overflow DoS

The vulnerability of the dcstatecreate function in the drivers/gpu/drm/amd/display/dc/core/dcstate.c file, a driver for AMD graphics cards, related to Linux operating systems, leads to unregulated resource consumption. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2025-68326 drm/xe/guc: Fix stack_depot usage

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Fix stackdepot usage Add missing stackdepotinit call when CONFIGDRMXEDEBUGGUC is enabled to fix the following call stack: BUG: kernel NULL pointer dereference, address: 0000000000000000 Workqueue: drmschedrunjobwork...

dcn20_fast_validate_bw Heap Buffer Overflow DoS

The vulnerability of the dcn20fastvalidatebw function in the drivers/gpu/drm/amd/display/dc/dcn20/dcn20resource.c driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

AMD Linux DRI Driver Heap Buffer Overflow DoS

The vulnerability of the dce11pplibapplydisplayrequirements function in the drivers/gpu/drm/amd/display/dc/clkmgr/dce110/dce110clkmgr.c file, a driver for AMD Direct Rendering Infrastructure DRI graphics cards for Linux operating systems, is related to the use of pointer manipulation. Exploiting...

drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup

...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991277)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991277 advisory. A race condition was found in the Linux kernel's drm/exynos device driver inexynosdrmcrtcatomicdisable function. This can result in a null pointer dereference issue,...

drm/tegra: Add call to put_pid()

...

SUSE CVE-2025-68189

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix GEM free for imported dma-bufs Imported dma-bufs also have obj-resv != &obj-resv. So we should check both this condition in addition to flags for handling the NOSHARE case. Fixes this splat that was reported with IRI...

SUSE CVE-2025-68193

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Add devm release action to safely tear down CT When a buffer object BO is allocated with the XEBOFLAGGGTTINVALIDATE flag, the driver initiates TLB invalidation requests via the CTB mechanism while releasing the BO...

Linux Distros Unpatched Vulnerability : CVE-2025-68314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm: make sure lastfence is always updated Update lastfence in the vm-bind path instead of kernel managed path. lastfence is used to wait for work to finish...

CVE-2025-68314

In the Linux kernel, the following vulnerability has been resolved: drm/msm: make sure lastfence is always updated Update lastfence in the vm-bind path instead of kernel managed path. lastfence is used to wait for work to finish in vmbind contexts but not used for kernel managed contexts. This...

EUVD-2025-203652

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD On completion of i915vmapinww, a synchronous variant of dmafenceworkcommit is called. When pinning a VMA to GGTT address space on a Cherry View family processor, ...

CVE-2025-68244

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD On completion of i915vmapinww, a synchronous variant of dmafenceworkcommit is called. When pinning a VMA to GGTT address space on a Cherry View family processor, ...

CVE-2025-68244 drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD On completion of i915vmapinww, a synchronous variant of dmafenceworkcommit is called. When pinning a VMA to GGTT address space on a Cherry View family processor, ...

CVE-2025-68233

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Add call to putpid Add a call to putpid corresponding to gettaskpid. host1xmemorycontextalloc does not take ownership of the PID so we need to free it here to avoid leaking. [email protected]: reword commit message...

CVE-2025-68207

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Synchronize Dead CT worker with unbind Cancel and wait for any Dead CT worker to complete before continuing with device unbinding. Else the worker will end up using resources freed by the undind operation. cherry pick...

AZL-72434 CVE-2025-68201 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: remove two invalid BUGONs Those can be triggered trivially by userspace...

CVE-2025-68196

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Cache streams targeting link when performing LT automation WHY Last LT automation update can cause crash by referencing currentstate and calling into dcupdateplanesandstream which may clobber currentstate. HOW...

CVE-2025-68193

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Add devm release action to safely tear down CT When a buffer object BO is allocated with the XEBOFLAGGGTTINVALIDATE flag, the driver initiates TLB invalidation requests via the CTB mechanism while releasing the BO...