PT-2026-121868

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized When DPM is turned off with the amdgpu.dpm=0 module parameter, the thermal work queue isn't initialized so we shouldn't schedule any work on it. cherry picke...

PT-2026-121864

In the Linux kernel, the following vulnerability has been resolved: drm/amd/ras: reset CPER ring on corrupt entry size When CPER ring overflow handling advances the read pointer, it trusts the parsed entry size from the current ring contents. Corrupt CPER data can produce an entry size that does...

PT-2026-121898

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Remove sink usage from DPMS Why stream-sink is optional and can be null, so should always be checked before dereference. Additionally, most of its usage in DPMS sequences is for stream-sink-link, which can be...

PT-2026-121905

In the Linux kernel, the following vulnerability has been resolved: usb: hub: use shorter 120ms post resume hold for SS root hubs Holding a USB3 hub PM runtime reference for 200ms at hub resume triggers an AMD platform issue. Users running Android adb report crashes after adb has been polling and...

Linux Distros Unpatched Vulnerability : CVE-2026-43598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in the AMD ROCm Communication Collectives Library RCCL could allow a compromised peer rank or network-adjacent attacker to dereference...

Linux Distros Unpatched Vulnerability : CVE-2026-98926

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Remove sink usage from DPMS Why stream-sink is optional and can be null, so should always be checked before dereference. Additionally, most of...

Linux Distros Unpatched Vulnerability : CVE-2026-98933

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: hub: use shorter 120ms post resume hold for SS root hubs Holding a USB3 hub PM runtime reference for 200ms at hub resume triggers an AMD platform issue...

Linux Distros Unpatched Vulnerability : CVE-2026-98894

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/ras: reset CPER ring on corrupt entry size When CPER ring overflow handling advances the read pointer, it trusts the parsed entry size from the current...

CVE-2026-72092

A flaw was found in the Linux kernel. A local user could trigger a kernel crash by submitting a command to an AMD XDNA device that does not support the command submission operation. This leads to a Denial of Service DoS...

CVE-2026-98719

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for AMD SEV Secure Encrypted Virtualization. This vulnerability occurs due to a double-free issue when memory allocated during virtual machine initialization is freed twice following an initialization failure. A loc...

CVE-2026-98715

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine AMD Secure Virtual Machine SVM implementation. This flaw can lead to information disclosure or memory corruption due to dropped Translation Lookaside Buffer TLB flushes. When a virtual machine execution VMRUN fails, KVM reset...

CVE-2026-98718

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem supporting AMD SEV Secure Encrypted Virtualization. During virtual machine migration on the same host, CPU cache maintenance was performed after deactivating the source guest's encryption state instead of before. Th...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143031)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143031 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callback on adapter add failure amdmp2registercb stores the platform I2C...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142554)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142554 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callback on adapter add failure amdmp2registercb stores the platform I2C...

CLSA-2026-1772815097 Fix of 104 CVEs

CVE-2025-38699 - scsi: bfa: Double-free fix CVE-2025-38699 CVE-2025-38697 - jfs: upper bound check of tree index in dbAllocAG CVE-2025-38697 CVE-2025-39823 - KVM: x86: use arrayindexnospec with indices that come from guest CVE-2025-39823 CVE-2025-39689 - ftrace: Also allocate and copy hash for...

SUSE CVE-2026-98729

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Don't apply vaalign to hugetlb mappings on AMD F15h getalignmask returns hugepagemaskalign for hugetlbfs, but getalignbits adds vaalign.bits regardless, so vmunmappedarea returns an address off the huge page boundary and...

CLSA-2026-1792519062 Update of linux-firmware

Update to version 20261001-999.50.git965ee9b6 - Drop the TuxCare AMD microcode for processor families 0x19 and 0x1a: the vendor tarball now ships the same 0x19 and newer 0x1a microcode...

CVE-2026-90035

A flaw was found in the drm/amd/display component of the Linux kernel. A local attacker, by connecting a specially crafted USB4/DPIA tunneling device, could trigger a division-by-zero error within the getestimatedbw function. This occurs when the device reports an estimated-bandwidth change befor...

CVE-2026-89812

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit driver. When the Multimedia Engine Scheduler MES ring stops responding and a system reset is triggered, the MES ring fences are not properly completed. This can lead to the system becoming unresponsive after resuming from the...

CVE-2026-93179

A flaw was found in the drm/amd/powerplay component of the Linux kernel. This vulnerability occurs when the VBIOS Video Basic Input/Output System provides a malformed VoltageObjectInfo table, which can lead to an infinite loop or an out-of-bounds OOB read in the system's memory. This could...