72 matches found
KB5089548: Windows 11 Version 26H1 Security Update (May 2026)
The remote Windows host is missing security update 5089548. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network. CVE-2026-41096 - Heap-based buffer overflow in Windows Win32K -...
PT-2026-40151
Name of the Vulnerable Software and Affected Versions Windows Win32K - GRFX affected versions not specified Description A race condition occurs in Windows Win32K - GRFX due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally. ...
CVE-2026-23471
In the Linux kernel, the following vulnerability has been resolved: drm: Fix use-after-free on framebuffers and property blobs when calling drmdevunplug When trying to do a rather aggressive test of igt's "xemoduleload --r reload" with a full desktop environment and game running I noticed a few...
CVE-2026-23430 drm/vmwgfx: Don't overwrite KMS surface dirty tracker
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Don't overwrite KMS surface dirty tracker We were overwriting the surface's dirty tracker here causing a memory leak...
The vulnerability of the i740fbdecodevar() function in the drivers/video/fbdev/i740fb.c driver for Linux kernel-based graphics buffer devices allows a hacker to cause a system failure.
The vulnerability of the i740fbdecodevar function in the drivers/video/fbdev/i740fb.c driver for Linux kernel-based graphics device drivers is related to insufficient checking of input data when dividing by zero. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the `fb_deferred_io_init()` function in the drivers/video/fbdev/core/fb_defio.c file of the Linux kernel’s graphics buffer device support driver allows a attacker to cause a service failure.
The vulnerability of the fbdeferredioinit function in the drivers/video/fbdev/core/fbdefio.c file of the Linux kernel’s graphics device support driver module is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the sun6i_dsi_setup_timings() function in the drivers/gpu/drm/sun4i/sun6i_mipi_dsi.c file of the Linux Direct Rendering Infrastructure (DRI) driver architecture allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the sun6idsisetuptimings function in the drivers/gpu/drm/sun4i/sun6imipidsi.c file of the Linux Direct Rendering Infrastructure driver architecture is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker t...
CVE-2026-23008
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix KMS with 3D on HW version 10 HW version 10 does not have GB Surfaces so there is no backing buffer for surface backed FBs. This would result in a nullptr dereference and crash the driver causing a black screen...
CVE-2022-50842
CVE-2022-50842 affects the Linux kernel DRM virtio path. The issue arises when transferring 2D buffer objects (BOs); a non-shmem BO (e.g., VRAM) could bypass a necessary check, potentially leading to a NULL dereference. The publicly documented fix is to validate that a transferred 2D BO is always...
SUSE CVE-2023-53991
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Disallow unallocated resources to be returned In the event that the topology requests resources that have not been created by the system because they are typically not represented in dpumdsscfg ^1, the resources in...
UBUNTU-CVE-2025-68174
In the Linux kernel, the following vulnerability has been resolved: amd/amdkfd: enhance kfd process check in switch partition current switch partition only check if kfdprocessestable is empty. kfdprcessestable entry is deleted in kfdprocessnotifierrelease, but kfdprocess tear down is in...
EUVD-2023-60090
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix potential kgdmem UAFs kgdmem pointers returned by kfdprocessdevicetranslatehandle are only guaranteed to be valid while p-mutex is held. As soon as the mutex is unlocked, another thread can free the BO...
SUSE CVE-2025-40316
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix device use-after-free on unbind A recent change fixed device reference leaks when looking up drm platform device driver data during bind but failed to remove a partial fix which had been added by commit...
CVE-2023-53816
CVE-2023-53816 affects the Linux kernel’s drm/amdkfd path where kgd_mem pointers returned by kfd_process_device_translate_handle are only valid while p->mutex is held; once released, another thread can free the BO, enabling a use-after-free. The CVSS v3.1 base score is 7.8 (HIGH) with LOCAL at...
CVE-2023-53816 drm/amdkfd: fix potential kgd_mem UAFs
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix potential kgdmem UAFs kgdmem pointers returned by kfdprocessdevicetranslatehandle are only guaranteed to be valid while p-mutex is held. As soon as the mutex is unlocked, another thread can free the BO...
CVE-2025-40191 drm/amdkfd: Fix kfd process ref leaking when userptr unmapping
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix kfd process ref leaking when userptr unmapping kfdlookupprocessbypid hold the kfd process reference to ensure it doesn't get destroyed while sending the segfault event to user space. Calling kfdlookupprocessbypid ...
kernel: drm/vkms: Fix use after free and double free on init error
In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkmsexit function might access an uninitialized or freed defaultconfig pointer and it might double free it. Fix both possible erro...
CVE-2025-40086 drm/xe: Don't allow evicting of BOs in same VM in array of VM binds
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds An array of VM binds can potentially evict other buffer objects BOs within the same VM under certain conditions, which may lead to NULL pointer dereferences late...
CVE-2023-53552 drm/i915: mark requests for GuC virtual engines to avoid use-after-free
In the Linux kernel, the following vulnerability has been resolved: drm/i915: mark requests for GuC virtual engines to avoid use-after-free References to i915requests may be trapped by userspace inside a syncfile or dmabuf dma-resv and held indefinitely across different proceses. To counter-act t...