3452 matches found
CVE-2025-40289 drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM Otherwise accessing them can cause a crash...
CVE-2025-40277
CVE-2025-40277 is a Linux kernel vulnerability affecting the DRM vmwgfx driver. The issue arises from validating the command header size against SVGA_CMD_MAX_DATASIZE, where user-supplied data used in buffer offset calculations could overflow and lead to an out-of-bounds access. Connected sources...
CVE-2025-40277 drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing an out-of-bounds access...
CVE-2025-40277 drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing an out-of-bounds access...
CVE-2025-40277
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing an out-of-bounds access...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from drm vmwgfx not validating command header sizes, which could result in a buffer overflow...
drm/xe/guc Linux Component Data Compromise
The vulnerability of the drm/xe/guc component in the Linux operating system is related to improper checking or processing of exceptional states. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
PT-2026-2597
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The open parameters in the drm/xe/oa module did not validate the num syncs value, potentially allowing userspace to provide excessively large values. This could lead to excessive memory...
UBUNTU-CVE-2025-40247
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix pgtable prealloc error path The following splat was reported: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010 Mem abort info: ESR = 0x0000000096000004 EC = 0x25: DABT current EL, ...
CVE-2025-40247 drm/msm: Fix pgtable prealloc error path
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix pgtable prealloc error path The following splat was reported: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010 Mem abort info: ESR = 0x0000000096000004 EC = 0x25: DABT current EL, ...
CVE-2025-40247
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix pgtable prealloc error path The following splat was reported: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010 Mem abort info: ESR = 0x0000000096000004 EC = 0x25: DABT current EL, ...
AMD Graphics DRI dcn10_set_drr() DoS
Vulnerability of the dcn10setdrr function in the drivers/gpu/drm/amd/display/dc/hwss/dcn10/dcn10hwseq.c module – The drivers that support Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems are vulnerable due to a pointer manipulation issue. Exploiting this...
AMD DRI Driver Heap Buffer Overflow DoS
The vulnerability in determining the structure of debugdefaultsdrv in the drivers/gpu/drm/amd/display/dc/resource/dcn35/dcn35resource.c file affects Linux kernel-based AMD graphics cards. This vulnerability is related to synchronization errors when using a shared resource. Exploiting this...
mtk_crtc. Heap Buffer Overflow DoS
Vulnerability of the mtkcrtcDestroy function in the drivers/gpu/drm/mediatek/mtkcrtc.c module – Drivers that support Direct Rendering Infrastructure DRI for Mediatek graphics cards in Linux operating systems are vulnerable due to a pointer manipulation issue. Exploiting this vulnerability could...
PT-2026-38944
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/v3d component where the max seg size is not set when using V3D rendering with CONFIG DMA API DEBUG enabled. This causes the kernel to default to a 64K segment...
AMD Graphics DRI dcn35_set_drr Heap Buffer Overflow DoS
Vulnerability of the dcn35setdrr function in the drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35hwseq.c module – Drivers that support Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems are vulnerable due to the reliance on pointer manipulation. Exploiting this...
Linux DRI Panthor Device Mmap I/O Buffer Overflow DoS
Vulnerability of the panthordevicemmapio function in the drivers/gpu/drm/panthor/panthordevice.c module – The driver for Linux’s Direct Rendering Infrastructure DRI has vulnerabilities related to authentication procedures. Exploiting this vulnerability could allow an attacker to cause service...
dcn21 HWSeq Buffer Overflow DoS
Vulnerability of the dcn21setabmimmediatedisable function in the drivers/gpu/drm/amd/display/dc/dcn21/dcn21HWSeq.c module – Drivers that support Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems are vulnerable due to a pointer manipulation issue. Exploiting thi...
CVE-2025-58408 GPU DDK - KASAN Read UAF in the PVRSRVBridgeRGXSubmitTransfer2 due to improper error handling code
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to kernel exceptions and write use-after-free. The Use After Free common weakness enumeration was chosen as the stale data can include handles to resources in whi...
