CVE-2026-48479

Use of uninitialized or invalid state in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integrity or denial of service...

CVE-2026-48479

Use of uninitialized or invalid state in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integrity or denial of service...

EUVD-2026-123473

Use of uninitialized or invalid state in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integrity or denial of service...

CVE-2026-48479

A vulnerability exists in the AMD Graphics Driver where the use of uninitialized or invalid state allows a local attacker to perform an out-of-bounds write (CWE-787). This flaw could potentially lead to a loss of integrity or a denial of service . Details regarding specific software versions, aff...

CVE-2026-48479: AMD: Use of uninitialized or invalid state in AMD Graphics Driver could allow a local attacker to write out of bounds,…

Use of uninitialized or invalid state in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integrity or denial of service...

PT-2026-145228

Use of uninitialized or invalid state in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integrity or denial of service...

AMD Radeon™ Graphics Driver Shader Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-48479| Use of uninitialized or invalid state in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integrity or denial of...

AMD Integrated Graphics Driver November 2026 Security Update

AMD has informed HP of potential vulnerabilities identified in the AMD Graphics Driver for Windows, which might allow information disclosure, tampering, denial of service, escalation of privilege, or arbitrary code execution. AMD is releasing software updates to mitigate potential vulnerabilities...

CLSA-2024-1729874131 kernel: Fix of 38 CVEs

drm/amdgpu: Validate TA binary size CVE-2024-44977 - drm/amd/display: Avoid overflow from uint32t to uint8t CVE-2024-47661 - scsi: lpfc: Handle mailbox timeouts in lpfcgetsfpinfo CVE-2024-46842 - ALSA: line6: Fix racy access to midibuf CVE-2024-44954 - exec: Fix ToCToU between perm check and...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix pci device refcount leak As noted in the comment for pcigetdomainbusandslot, it returns a pci device with a refcount increment; after using it, the caller must decrement the reference count by calling pcidevput...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Updated the intermediate power state for SI. Updated the current state to the boot state during dpm initialization. During subsequent initialization, setpowerstate is called to transition to the final power state...

ROS-20260929-73-0035

The vulnerability of the dcstreamgetscanoutpos function in the drivers/gpu/drm/amd/display/dc/core/dcstream.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow a...

ROS-20260925-73-0091

The vulnerability of the dalvectorreserve function in the drivers/gpu/drm/amd/display/dc/basics/vector.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to a buffer overflow in dynamic memory. Exploiting this vulnerability could...

CVE-2026-68272

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate CPGFXSHADOW chunk size in CS pass1 Add a minimum-length check for the AMDGPUCHUNKIDCPGFXSHADOW chunk in amdgpucspass1, matching the gate already present for the IB, FENCE and BOHANDLES chunk types. The...

EUVD-2026-55351

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.2: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit ae658afc7f47f6147371ec42cc6b1a793dfdb5af...

CVE-2026-68246

Technical details are not publicly available in the provided documents. Monitor for updates on affected kernel versions and patch notes.

EUVD-2026-55338

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix indefinite fence wait during GPU reset prereset only force-completes fences of MAPPED queues. A queue in any other state e.g. mid-eviction keeps its lastfence pending; after a GPU reset that fence never...

CVE-2026-68236

CVE-2026-68236 : In the Linux kernel, the drm/amd/display path (dm_update_crtc_state) releases a stream pointer (new_stream) but fails to NULL it. If an error occurs later, the code may call dc_stream_release() again on the same dangling pointer, causing a double release and use-after-free. The f...

EUVD-2026-55488

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by vcnv40encfindibparam instead of rereading it from the IB. This avoids a potential TOCTOU issue if the IB contents change between reads. cherr...

CVE-2026-63854

CVE-2026-63854 affects the Linux kernel’s DRM amdgpu/vcn path. The issue is that VCN v3.0 encoder/decoder rings do not support 64-bit user fence writes, causing the kernel to reject CS submissions that use user fences. The vulnerability has a CVSS 3.1 base score of 7.8 (HIGH) with local access, l...