AMD DRI Heap Buffer Overflow DoS

The vulnerability of the dmlcoremodesupport function in the drivers/gpu/drm/amd/display/dc/dml2/dml21/src/dml2core/dml2coredcn4calcs.c file of the DRI support driver for AMD GPU-based Linux operating system kernels is related to a numerical overflow vulnerability. Exploiting this vulnerability...

dcn20_program_pipe() AMD Graphics DRI DoS

The vulnerability of the dcn20programpipe function in the drivers/gpu/drm/amd/display/dc/dcn20/dcn20hwseq.c driver module related to the Direct Rendering Infrastructure DRI of AMD graphics cards in Linux operating systems is associated with pointer aliasing. Exploiting this vulnerability could...

dcn32_set_output_transfer_func() Function DRI DoS

The vulnerability of the dcn32setoutputtransferfunc function in the drivers/gpu/drm/amd/display/dc/dcn32/dcn32hwseq.c driver module of the Direct Rendering Infrastructure DRI support driver for AMD graphics cards in Linux operating systems is related to the use of pointers. Exploiting this...

adreno_gpu_init Heap Buffer Overflow DoS

The vulnerability of the adrenogpuinit function in the drivers/gpu/drm/msm/adreno/adrenogpu.c file, a part of the Linux Direct Rendering Infrastructure DRI support driver, involves pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

drivers/gpu/drm/amd/display/dc/dcn32/dcn32_hwseq.c

The vulnerability of the dcn32inithw function in the drivers/gpu/drm/amd/display/dc/dcn32/dcn32hwseq.c driver module of the Direct Rendering Infrastructure DRI support driver for AMD graphics cards in Linux operating systems is related to the use of pointers. Exploiting this vulnerability could...

drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hw

The vulnerability of the dcn401setoutputtransferfunc function in the drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401hwseq.c driver module of the Direct Rendering Infrastructure DRI support for AMD graphics cards in Linux operating systems is related to the use of pointers. Exploiting this...

drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV

...

drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c

The vulnerability of the dcn30inithw function in the drivers/gpu/drm/amd/display/dc/dcn30/dcn30hwseq.c driver module of the Direct Rendering Infrastructure DRI support driver for AMD video cards in Linux operating systems is related to the use of pointers. Exploiting this vulnerability could allo...

amdgpu_aca Function DoS

The vulnerability of the acabanksrelease function in the drivers/gpu/drm/amd/amdgpu/amdgpuaca.c driver module relates to the pointer manipulation in AMD GPU kernel support for Linux operating systems. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Direct Rendering Infrastructure DoS

The vulnerability in the drivers/gpu/drm/vc4/vc4dsi.c driver of the Direct Rendering Infrastructure DRI support in the Linux operating system is related to incorrect resource blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990470)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990470 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga For pptable structs that use...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990479)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990479 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Return error code in mdp5piperelease when deadlock is detected mdp5getglobalstate...

CVE-2025-54335

An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1580, 2500. There is a use-after-free in the Xclipse GPU Driver...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990184 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix the null pointer dereference in applystateadjustrules Check the pointer value ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989880)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989880 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/plane: Move range check for formatcount earlier While the check for formatcount 64 in...

Samsung Mobile Processor Exynos security vulnerabilities

SAMSUNG Mobile Processor Exynos is a system-on-chip SoC from South Korea's Samsung SAMSUNG dedicated to smartphones and tablets. A security vulnerability exists in SAMSUNG Mobile Processor Exynos, which originates from a post-release reuse in the Xclipse GPU driver. The following products are...

CVE-2025-54335

An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1580, 2500. There is a use-after-free in the Xclipse GPU Driver...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Disable interrupts before resetting the GPU Currently, an interrupt can be triggered during a GPU reset, which can lead to GPU hangs and NULL pointer dereference in an interrupt context as shown in the following trace:...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Do not call mmput from the MMU notifier callback. If the process exits, the mmput call within the MMU notifier callback from compactd, fork, or numa balancing may release the last reference to the mm struct. This coul...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: The CT safe mode is now exited explicitly during unwinding. During driver probes, we may briefly use the CT safe mode, which relies on delayed tasks. Usually, we can stop this once the IRQ functions properly. However,...