CVE-2022-50440

The CVE-2022-50440 issue affects the Linux kernel DRM vmwgfx driver (drm/vmwgfx) where an invalid box size check for the snooped cursor allows an overflow during DMA surface copies, potentially crashing the system. The problem stems from improper validation of the copybox dimensions against the s...

PT-2025-40104

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the drm/amdkfd module. A shift-out-of-bounds warning can occur if get num sdma queues or get num xgmi sdma queues returns 0, leading to a shift...

NVIDIA GPU Display Driver Privilege Escalation

The vulnerability of the NVIDIA GPU Display Driver is related to incorrect authorization. Exploiting this vulnerability can allow an attacker to increase their privileges...

Linux drivers gpu drm imagination DoS

The vulnerability of the drivers/gpu/drm/imagination components of the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux DRM/AMD/PM DoS

The vulnerability of the DRM/AMD/PM components in the Linux operating system is related to the lack of checks for division by zero. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

drm/vc4: don't check if plane->state->fb == state->fb

...

drm/amd/pm: fix a potential gpu_metrics_table memory leak

...

Linux drm_crtc_handle_vblank() DoS

The vulnerability of the drmcrtchandlevblank function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...

CVE-2025-46711

A vulnerability exists in GPU DDK where software running as a non-privileged user can perform improper GPU system calls. This triggers a NULL pointer dereference within the LockHandle on bridge entry when a connection is misused, leading to kernel exceptions . The impact is categorized as having ...

CVE-2025-25177

The Imagination Graphics DDK (GPU driver tools) is vulnerable to a security flaw where a non-privileged user can conduct improper GPU system calls . This action can trigger use-after-free (UAF) kernel exceptions, potentially leading to system instability or kernel-level issues. While the technica...

SUSE CVE-2023-53388

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Clean dangling pointer on bind error path mtkdrmbind can fail, in which case drmdevput is called, destroying the drmdevice object. However a pointer to it was still being held in the private object, and that pointer...

Intel Graphics Driver Privilege Escalation

The vulnerability of Intel Graphics Driver drivers is related to the incorrect use of standard resolutions. Exploiting this vulnerability can allow attackers to increase their privileges...

Linux Distros Unpatched Vulnerability : CVE-2022-50368

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm/dsi: fix memory corruption with too many bridges Add the missing sanity check on the bridge counter to avoid corrupting data beyond the fixed-sized brid...

DEBIAN-CVE-2023-53378

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dpt: Treat the DPT BO as a framebuffer Currently i915gemobjectisframebuffer doesn't treat the BO containing the framebuffer's DPT as a framebuffer itself. This means eg. that the shrinker can evict the DPT BO while leavi...

UBUNTU-CVE-2022-50393

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: SDMA update use unlocked iterator SDMA update page table may be called from unlocked context, this generate below warning. Use unlocked iterator to handle this case. WARNING: CPU: 0 PID: 1475 at...

CVE-2023-53388

Summary of CVE-2023-53388 : In the Linux kernel, the DRM/Mediatek driver had a dangling pointer in the error path of the bind sequence. When mtk_drm_bind() fails, the code previously called drm_dev_put() to destroy the drm_device, but a private object still held a pointer to that device. If a sus...

CVE-2023-53378 drm/i915/dpt: Treat the DPT BO as a framebuffer

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dpt: Treat the DPT BO as a framebuffer Currently i915gemobjectisframebuffer doesn't treat the BO containing the framebuffer's DPT as a framebuffer itself. This means eg. that the shrinker can evict the DPT BO while leavi...

CVE-2023-53378 drm/i915/dpt: Treat the DPT BO as a framebuffer

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dpt: Treat the DPT BO as a framebuffer Currently i915gemobjectisframebuffer doesn't treat the BO containing the framebuffer's DPT as a framebuffer itself. This means eg. that the shrinker can evict the DPT BO while leavi...

SUSE CVE-2022-50260

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Make .remove and .shutdown HW shutdown consistent Drivers' .remove and .shutdown callbacks are executed on different code paths. The former is called when a device is removed from the bus, while the latter is called at...

DEBIAN-CVE-2022-50360

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: fix aux-bus EP lifetime Device-managed resources allocated post component bind must be tied to the lifetime of the aggregate DRM device or they will not necessarily be released when binding of the aggregate device is...