Scheduler-Contention Side Channel on AMD “Zen” Processors

Revisions Revision Date| Description ---|--- 2026-08-12| Initial publication...

Linux Distros Unpatched Vulnerability : CVE-2026-68447

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size CRIU checkpoint copies the MQD control stack using cphqdcntlstacksize from hardware without...

SUSE CVE-2026-68325

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bound the early ACPI HID map The ivrsacpihid command-line parser appends entries to a fixed four-element earlyacpihidmap array. Unlike the sibling IOAPIC and HPET parsers, it does not reject a fifth entry before...

SUSE CVE-2026-68329

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Wait for completion instead of returning early in iommucompletionwait needsync is a per-IOMMU flag shared by all domains and devices behind that IOMMU. It is set whenever a command is queued with sync == true and clear...

SUSE CVE-2026-68347

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix IRQ unsafe locking in gdom allocation Lockdep complains: 259.410489 ===================================================== 259.417287 WARNING: HARDIRQ-safe - HARDIRQ-unsafe lock order detected 259.424667...

CVE-2026-68112

A flaw was found in the drm/amdgpu/gfx9.4.3 component of the Linux kernel. This vulnerability is due to the use of BUGON macros in error handling, which, when triggered by specific error conditions, could cause the kernel to crash. This could result in a Denial of Service DoS for the system...

CVE-2026-68256

A flaw was found in the drm/amd/display component of the Linux kernel. This issue occurs in the detectlinkandlocalsink function, where a prevsink reference is not properly released if the DisplayPort DP alt mode timeout path returns false. This missing cleanup can lead to a memory leak, potential...

CVE-2026-68276

A flaw was found in the Linux kernel's drm/amdgpu/gfx component. A local attacker could exploit a buffer overflow vulnerability in the cleaner shader's sysfs path. This occurs because the system incorrectly writes 256 double words dwords into a buffer allocated for only 16 dwords 64 bytes...

CVE-2026-0465

A Use‑After‑Free UAF vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability...

CVE-2025-54512

A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary code execution...

CVE-2026-68329

A flaw was found in the Linux kernel's iommu/amd component. A race condition in the iommucompletionwait function allows it to return prematurely without ensuring all previously queued commands have completed in hardware. This can lead to a use-after-free vulnerability, where the Input/Output Memo...

CVE-2026-68364

A flaw was found in the drm/amd/display component of the Linux kernel. A deadlock can occur during system suspend and resume operations when video is actively playing. This issue arises due to conflicting locking mechanisms within the display driver, where a function attempting to disable a...

CVE-2026-68347

A flaw was found in the Linux kernel's AMD IOMMU Input/Output Memory Management Unit driver. This vulnerability is caused by an unsafe lock order during the allocation of graphics domains gdom and within the IOMMUDESTROY free path. This issue could lead to a system crash or a denial of service Do...

CVE-2026-59130

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally...

CVE-2026-59131

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally...

CVE-2026-43606

Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptograph...

CVE-2025-8087

A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution...

CVE-2025-54512

A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary code execution...

CVE-2025-54512

Technical details for CVE-2025-54512 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2025-54512

A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary code execution...