9533 matches found
amd_hypervisor
amdhypervisor AMD Hypervisor written writh Rust. Features Easily define your own vmexit handlers MSR read/write Cpuid Rdtsc and all the other vmexits NPT Hooking Memory safe and blazingly fast 🚀 Example See driver/ for a reference implementation. Notes on how to write a kernel driver can be found...
CVE-2023-31320
CVE-2023-31320 Proof of concept code for a denial of service vulnerability in the AMD display driver that corrupts the display. AMD security bulletin Demo This video contains flashing lights! https://github.com/whypet/CVE-2023-31320/assets/47226783/658776cb-6dbc-4a76-a671-fc1f4924b2a9 Building...
CVE-2026-99099
A flaw was found in the Linux kernel. On systems running affected AMD processors without microcode fixes, the processor may fail to properly clear cached entries in the Translation Lookaside Buffer TLB, a hardware cache used to speed up memory address translation, during flush operations. A local...
cve-2023-31346-poc
Firmware Memory Leak The code here aims to demonstrate the memory leaks in guest messages headers and the CPUID request guest message. Prerequisites Install rustup. Install a Linux kernel with SEV-SNP host support. I used a kernel with my a few of own patches...
CVE-2020-12928
CVE-2020-12928 LPE Exploit code This repo is for learning purpose only . demo Reference: https://h0mbre.github.io/RyzenMasterCVE/ https://movaxbx.ru/2020/10/14/cve-2020-12928-exploit-proof-of-concept-privilege-escalation-in-amd-ryzen-master-amdryzenmasterdriver-sys/...
POC_CVE-2025-29943_Write-what-where-Condition
StackWarp: PoC for CVE-2025-29943 Proof of concept for the StackWarp hardware vulnerability CVE-2025-29943 in AMD processors. This flaw allows an attacker with administrator privileges on a host hypervisor to manipulate the CPU pipeline configuration to corrupt the stack pointer within a SEV-SNP...
CVE-2026-99151
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions allocateusb4bandwidthforstream and allocateusb4bandwidth both use ASSERTstream-sink before dereferencing stream-sink-link. ASSERT is compiled out in productio...
CVE-2026-99151
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions allocateusb4bandwidthforstream and allocateusb4bandwidth both use ASSERTstream-sink before dereferencing stream-sink-link. ASSERT is compiled out in productio...
CVE-2026-99151 drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions allocateusb4bandwidthforstream and allocateusb4bandwidth both use ASSERTstream-sink before dereferencing stream-sink-link. ASSERT is compiled out in productio...
EUVD-2026-111903
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions allocateusb4bandwidthforstream and allocateusb4bandwidth both use ASSERTstream-sink before dereferencing stream-sink-link. ASSERT is compiled out in productio...
CVE-2026-99151
The Linux kernel contains a NULL pointer dereference vulnerability within the drm/amd/display component, specifically in the USB4 bandwidth functions . The functions allocate_usb4_bandwidth_for_stream() and allocate_usb4_bandwidth() use ASSERT(stream->sink) before accessing stream->sink->...
CVE-2026-99151 drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions allocateusb4bandwidthforstream and allocateusb4bandwidth both use ASSERTstream-sink before dereferencing stream-sink-link. ASSERT is compiled out in productio...
UBUNTU-CVE-2026-99151
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions allocateusb4bandwidthforstream and allocateusb4bandwidth both use ASSERTstream-sink before dereferencing stream-sink-link. ASSERT is compiled out in productio...
Linux Distros Unpatched Vulnerability : CVE-2026-99151
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions allocateusb4bandwidthforstream and allocateusb4bandwidth both use ASSERTstream-sink befor...
PT-2026-128144
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions allocate usb4 bandwidth for stream and allocate usb4 bandwidth both use ASSERTstream-sink before dereferencing stream-sink-link. ASSERT is compiled out in...
Linux Distros Unpatched Vulnerability : CVE-2026-99099
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/CPU/AMD: Fix AMD TLBI Erratum 1718 The processor may fail to invalidate a TLB entry while executing an INVLPGB/TLBSYNC instruction pair. Detect the erratum...
SUSE CVE-2026-98898
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized When DPM is turned off with the amdgpu.dpm=0 module parameter, the thermal work queue isn't initialized so we shouldn't schedule any work on it. cherry picke...
SUSE CVE-2026-98926
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Remove sink usage from DPMS Why stream-sink is optional and can be null, so should always be checked before dereference. Additionally, most of its usage in DPMS sequences is for stream-sink-link, which can be...
CVE-2026-99090
A flaw was found in the Linux kernel's AMD GPU driver. A local user could cause a Denial of Service DoS or system instability by triggering GPU recovery operations. Due to a race condition, the driver allows vertical blanking vblank counter reads from display hardware without proper lock...
CVE-2026-98910
A flaw was found in the Linux kernel's AMD GPU driver amdkfd. When enabling a debug trap fails during data transfer to user space, the kernel fails to clean up previously allocated resources and state, leaving an inconsistent trap state and an unreleased process reference count. A local attacker...