SUSE-SU-2025:20188-1 Security update for kernel-livepatch-MICRO-6-0_Update_2

This update for kernel-livepatch-MICRO-6-0Update2 fixes the following issues: - CVE-2024-57882: Fixed mptcp: fix TCP options overflow. bsc1235916 - CVE-2024-46818: Fixed drm/amd/display: check gpioid before used as array index bsc1231204 - CVE-2024-46815: Fixed drm/amd/display: check numvalidsets...

The vulnerability of the function cm3_helper_translate_curve_toHW_format() in the AMD Display driver’s kernel module /drivers/gpu/drm/amd/display/dc/dcn30/dcn30_cm_common.c, which can be exploited by attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cm3helpertranslatecurvetohwformat function in the AMD Display driver’s kernel module /drivers/gpu/drm/amd/display/dc/dcn30/dcn30cmcommon.c in the Linux kernel is related to the copying of buffers without checking their size a classic buffer overflow attack. Exploiting thi...

CVE-2024-36328

Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of integrity or availability...

CVE-2024-36336

Integer overflow within the AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to a loss of confidentiality, integrity, or availability...

The vulnerability of the dcn10_log_color_state() function in the drivers/gpu/drm/amd/display/dc/hwss/dcn10/dcn10_hwseq.c driver module allows a hacker to cause a service failure. This vulnerability is related to the Direct Rendering Infrastructure (DRI) support in AMD graphics cards for Linux operating systems.

The vulnerability of the dcn10logcolorstate function in the drivers/gpu/drm/amd/display/dc/hwss/dcn10/dcn10hwseq.c driver module relates to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from an out-of-bounds array index in the AMD display driver, resulting in memory corruption and affecting...

CVE-2024-56542 drm/amd/display: fix a memleak issue when driver is removed

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a memleak issue when driver is removed Running "modprobe amdgpu" the second time followed by a modprobe -r amdgpu causes a call trace like: 845.212163 Memory manager not clean during takedown. 845.212170...

kernel: drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga

In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga For pptable structs that use flexible array sizes, use flexible arrays...

CVE-2024-49890 drm/amd/pm: ensure the fw_info is not null before using it

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: ensure the fwinfo is not null before using it This resolves the dereference null return value warning reported by Coverity...

kernel: use-after-free in kv_parse_power_table

A use-after-free flaw was found in kvparsepowertable in drivers/amd/pm in the Linux kernel. When ps equals NULL, kvparsepowertable frees adev-pm.dpm.ps. The adev-pm.dpm.ps is used in the loop of kvdpmfini after its first free in kvparsepowertable, causing a use-after-free problem...

UBUNTU-CVE-2023-52812

In the Linux kernel, the following vulnerability has been resolved: drm/amd: check num of link levels when update pcie param In SR-IOV environment, the value of pcietable-numoflinklevels will be 0, and numoflevels - 1 will cause array index out of bounds...

SUSE CVE-2023-52469

In the Linux kernel, the following vulnerability has been resolved: drivers/amd/pm: fix a use-after-free in kvparsepowertable When ps allocated by kzalloc equals to NULL, kvparsepowertable frees adev-pm.dpm.ps that allocated before. However, after the control flow goes through the following call...

DEBIAN-CVE-2023-52469

In the Linux kernel, the following vulnerability has been resolved: drivers/amd/pm: fix a use-after-free in kvparsepowertable When ps allocated by kzalloc equals to NULL, kvparsepowertable frees adev-pm.dpm.ps that allocated before. However, after the control flow goes through the following call...

AMD Radeon Graphics Kernel Driver Privilege Management Vulnerability - Lenovo Support US

No description provided...

Intel Core Processors 缓冲区错误漏洞

Intel Core Processors is an Intel Core family of central processing units CPUs from Intel Corporation. A security vulnerability exists in Intel Core Processors that stems from an invalid objectless pointer vulnerability in the AMD graphics driver for Windows 10 that could lead to privilege...

CVE-2020-12927

A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privileges to NT authority system...

CVE-2020-12927

A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privileges to NT authority system...

Design/Logic Flaw

A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privileges to NT authority system...

CVE-2020-12928

A vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may allow any authenticated user to escalate privileges to NT authority system...

Memory corruption

An exploitable memory corruption vulnerability exists in AMD atidxx64.dll 26.20.15019.19000 graphics driver. A specially crafted pixel shader can cause memory corruption vulnerability. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability...