9391 matches found
CVE-2026-98786 drm/amd/display: guard dc_sink dereferences in MST mode validation
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: guard dcsink dereferences in MST mode validation dmdpmstisportsupportmode reads aconnector-dcsink-dsccaps... for the DSC branch-throughput check, and getconvfrlbw's HDMI-PCON FRL-bandwidth path reads...
CVE-2026-98786
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: guard dcsink dereferences in MST mode validation dmdpmstisportsupportmode reads aconnector-dcsink-dsccaps... for the DSC branch-throughput check, and getconvfrlbw's HDMI-PCON FRL-bandwidth path reads...
CVE-2026-98786
The Linux kernel contains a vulnerability in the drm/amd/display driver where dm_dp_mst_is_port_support_mode() and get_conv_frl_bw() perform NULL pointer dereferences . The issue occurs because these functions access aconnector->dc_sink without sufficient checks during MST unplug operations. S...
CVE-2026-98785
The Linux kernel contains a vulnerability within the drm/amd/display driver. The function dc_state_create_copy() can return NULL in the event of an allocation failure. If this occurs, dm_suspend() fails to properly abort the suspend process, allowing it to continue and return success while leavin...
CVE-2026-98786 drm/amd/display: guard dc_sink dereferences in MST mode validation
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: guard dcsink dereferences in MST mode validation dmdpmstisportsupportmode reads aconnector-dcsink-dsccaps... for the DSC branch-throughput check, and getconvfrlbw's HDMI-PCON FRL-bandwidth path reads...
CVE-2026-98785 drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check dcstatecreatecopy for NULL in dmsuspend dcstatecreatecopy can return NULL on allocation failure. dmsuspend only conditionally skips dmgpuresettoggleinterrupts and continues execution, returning success...
CVE-2026-98785 drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check dcstatecreatecopy for NULL in dmsuspend dcstatecreatecopy can return NULL on allocation failure. dmsuspend only conditionally skips dmgpuresettoggleinterrupts and continues execution, returning success...
CVE-2026-98729 x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Don't apply vaalign to hugetlb mappings on AMD F15h getalignmask returns hugepagemaskalign for hugetlbfs, but getalignbits adds vaalign.bits regardless, so vmunmappedarea returns an address off the huge page boundary and...
CVE-2026-98729 x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Don't apply vaalign to hugetlb mappings on AMD F15h getalignmask returns hugepagemaskalign for hugetlbfs, but getalignbits adds vaalign.bits regardless, so vmunmappedarea returns an address off the huge page boundary and...
EUVD-2026-103814
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Don't apply vaalign to hugetlb mappings on AMD F15h getalignmask returns hugepagemaskalign for hugetlbfs, but getalignbits adds vaalign.bits regardless, so vmunmappedarea returns an address off the huge page boundary and...
CVE-2026-98729
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Don't apply vaalign to hugetlb mappings on AMD F15h getalignmask returns hugepagemaskalign for hugetlbfs, but getalignbits adds vaalign.bits regardless, so vmunmappedarea returns an address off the huge page boundary and...
CVE-2026-98729
The Linux kernel contains a vulnerability where va_align is incorrectly applied to hugetlb mappings on AMD F15h architectures. The root cause is that get_align_bits() adds va_align.bits regardless of the fact that get_align_mask() returns huge_page_mask_align() for hugetlbfs . This leads vm_unmap...
EUVD-2026-103568
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Atomize IRQ register read/modify/write ops Why The OTGGLOBALSYNCSTATUS register controls various HW IRQ sources for the output timing generator OTG. VUPDATENOLOCK is one of them. To enable the IRQ, driver sets th...
CVE-2026-98654
Removed by vendor...
CVE-2026-98654
The Linux kernel contains a race condition within the drm/amd/display driver. The issue arises because read/modify/write (RMW) operations on the OTG_GLOBAL_SYNC_STATUS register (and other IRQ control registers) are not atomic. Specifically, a race can occur between a thread disabling an IRQ and t...
Linux Distros Unpatched Vulnerability : CVE-2026-98786
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: guard dcsink dereferences in MST mode validation dmdpmstisportsupportmode reads aconnector-dcsink-dsccaps... for the DSC branch-throughput chec...
Linux Distros Unpatched Vulnerability : CVE-2026-98785
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: check dcstatecreatecopy for NULL in dmsuspend dcstatecreatecopy can return NULL on allocation failure. dmsuspend only conditionally skips...
CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2023:1690294029)
The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2023:1690294029 advisory. - A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create...
CVE-2022-21894-Payload-New
This is a simple example payload for CVE-2022-21894 that demonstrates how an attacker could map a second stage payload in order to be able to call EFI services. A writeup of this vulnerability can be viewed here: https://github.com/Wack0/CVE-2022-21894. The code in this repository extends the PoC...