CVE-2020-16898_Workaround

CVE-2020-16898Workaround PowerShell Script Workaround for VCE-220-16898 vulnerability...

Oracle Linux 8 : kernel (ELSA-2026-82807)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-82807 advisory. - drm/amdkfd: Add TLB flush after MES queue eviction/suspension Jocelyn Falempe RHEL-262108 CVE-2026-89811 - drm/amd/display: set newstream to NULL...

RLSA-2026:82806 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: ipv6: validate extension header length before copying to...

RLSA-2026:82807 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: ipv6: validate extension header length before copying to cmsg CVE-2026-63920 kernel: drm/amd/display: set newstre...

kernel: drm/amdgpu/vce: fix integer overflow in image size

A flaw was found in the drm/amdgpu/vce component of the Linux kernel. Malicious VCE Video Codec Engine command streams with oversized dimensions can cause a 32-bit integer overflow. This overflow bypasses validation, allowing the GPU firmware to perform out-of-bound memory access. This could lead...

kernel: drm/amdgpu/vce: fix integer overflow in image size

A flaw was found in the drm/amdgpu/vce component of the Linux kernel. Malicious VCE Video Codec Engine command streams with oversized dimensions can cause a 32-bit integer overflow. This overflow bypasses validation, allowing the GPU firmware to perform out-of-bound memory access. This could lead...

kernel security update

4.18.0-553.173.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

K000163599: Linux kernel vulnerability CVE-2026-53375

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that only one of lo/hi is valid, the patching could result in a bad address written to in FW. CVE-2026-53375 Impact There is no impact; F5...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevents partial address patches. In the case where only one of lo/hi is valid, patching could result in a bad address being written into the firmware...

kernel: drm/amdgpu/vce: fix integer overflow in image size

A flaw was found in the drm/amdgpu/vce component of the Linux kernel. Malicious VCE Video Codec Engine command streams with oversized dimensions can cause a 32-bit integer overflow. This overflow bypasses validation, allowing the GPU firmware to perform out-of-bound memory access. This could lead...

kernel: drm/amdgpu/vce: fix integer overflow in image size

A flaw was found in the drm/amdgpu/vce component of the Linux kernel. Malicious VCE Video Codec Engine command streams with oversized dimensions can cause a 32-bit integer overflow. This overflow bypasses validation, allowing the GPU firmware to perform out-of-bound memory access. This could lead...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: The use of an uninitialized value size when calling amdgpuvcecsreloc. Initialize the size value before calling amdgpuvcecsreloc, such as in the case where it’s set to 0x03000001. V2: To truly improve the handling, we...

vce-terminal (>=1.2.4, <=1.2.8) potentially affected by unknown CVE via eletron (0.0.1-security)

eletron NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on eletron and may be impacted: - vce-terminal =1.2.4, =1.2.8 Source cves: unknown CVE Source advisory: GHSA-9MG6-398P-2RP4...

amdgpu_vce_cs_reloc Heap Buffer Overflow DoS

The vulnerability of the amdgpuvcecsreloc function in the drivers/gpu/drm/amd/amdgpu/amdgpuvce.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073370)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073370 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that only one of lo/hi is valid, the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098900)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098900 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that only one of lo/hi is valid, the...

SUSE CVE-2026-68108

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: fix integer overflow in image size Fix a security vulnerability where malicious VCE command streams with oversized dimensions e.g. 65536x65536 cause 32-bit integer overflow, wrapping the calculated buffer size to ...

CVE-2026-68108

A flaw was found in the drm/amdgpu/vce component of the Linux kernel. Malicious VCE Video Codec Engine command streams with oversized dimensions can cause a 32-bit integer overflow. This overflow bypasses validation, allowing the GPU firmware to perform out-of-bound memory access. This could lead...

drm/amdgpu/vce: fix integer overflow in image size

...

CVE-2026-68108

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: fix integer overflow in image size Fix a security vulnerability where malicious VCE command streams with oversized dimensions e.g. 65536×65536 cause 32-bit integer overflow, wrapping the calculated buffer size to ...