CVE-2026-97498

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. Memory queue and firmware buffer objects used by user queues were not pinned in memory, allowing them to be evicted during memory pressure. A local user could exploit this issue to cause the graphics hardware to access invalid memory...

CVE-2026-97493

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. The driver fails to validate the size of Video BIOS VBIOS tables, allowing the calculated entry count to exceed the bounds of an internal array. A local attacker or compromised firmware image could exploit this flaw to trigger an...

CVE-2026-97928

A flaw was found in the AMD GPU amdgpu driver within the Linux kernel. When clearing video memory VRAM upon deallocation, the driver performs an unnecessary virtual memory flush operation. A local user can trigger this flaw during graphics memory operations, causing the graphics processing unit G...

CVE-2026-97426

A flaw was found in the Linux kernel's AMDGPU driver. When processing input for the SmartShift bias sysfs configuration interface, an input parsing failure causes the driver to release power management access without having first acquired it. A local user with write access to this interface could...

CVE-2026-97424

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. A local user could cause a Denial of Service DoS by triggering a system suspend followed by unloading the driver. Due to missing suspend handling and improper cleanup logic in the Reliability, Availability, and Serviceability RAS...

CVE-2026-97428

A flaw was found in the Linux kernel's AMDGPU driver. During the parsing of Field Replaceable Unit FRU data from EEPROM, the driver does not properly validate boundaries against the actual data length. An attacker capable of supplying truncated or malformed FRU data can trigger an out-of-bounds...

CVE-2026-97425

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. The driver fails to enforce maximum size limits on the sysfs interface used for updating the video Basic Input/Output System vBIOS. A local user with write access to the device interface could exploit this flaw by sending data exceedin...

RHEL 8 : kernel-rt (RHSA-2026:72467)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72467 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit driver, specifically within the drm/amdgpu/vcn4 component. This vulnerability allows for an out-of-bounds read when processing an Instruction Buffer IB. An attacker could potentially exploit this to read sensitive information...

kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg

A flaw was found in the Linux kernel's drm/amdgpu/vcn3 component. This vulnerability, an Out-of-Bounds OOB read, occurs when parsing decoder messages without proper boundary checks. A local attacker could potentially exploit this to read sensitive information from memory or cause system...

kernel: drm/amdgpu: Fix context pstate override handling

A flaw was found in the Linux kernel's amdgpu graphics driver. Improper handling of context pstate overrides can lead to use-after-free and NULL pointer dereferences during context initialization and finalization. A local attacker could exploit this vulnerability to cause system instability or a...

kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg

A flaw was found in the Linux kernel's drm/amdgpu/vcn4 component. This vulnerability allows an attacker to trigger an out-of-bounds OOB read when parsing decoder messages due to insufficient bounds checking. This could lead to information disclosure, potentially revealing sensitive data from memo...

CVE-2026-93809

A flaw was found in the Linux kernel's AMD GPU driver amdgpu. A local user with administrative privileges could cause a Denial of Service DoS by unloading the driver module while callbacks are still scheduled. Because the driver does not wait for pending Read-Copy Update RCU callbacks to complete...

kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit driver, specifically within the drm/amdgpu/vcn4 component. This vulnerability allows for an out-of-bounds read when processing an Instruction Buffer IB. An attacker could potentially exploit this to read sensitive information...

kernel: drm/amdgpu: Fix context pstate override handling

A flaw was found in the Linux kernel's amdgpu graphics driver. Improper handling of context pstate overrides can lead to use-after-free and NULL pointer dereferences during context initialization and finalization. A local attacker could exploit this vulnerability to cause system instability or a...

kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg

A flaw was found in the Linux kernel's drm/amdgpu/vcn4 component. This vulnerability allows an attacker to trigger an out-of-bounds OOB read when parsing decoder messages due to insufficient bounds checking. This could lead to information disclosure, potentially revealing sensitive data from memo...

kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg

A flaw was found in the Linux kernel's drm/amdgpu/vcn3 component. This vulnerability, an Out-of-Bounds OOB read, occurs when parsing decoder messages without proper boundary checks. A local attacker could potentially exploit this to read sensitive information from memory or cause system...

RLSA-2026:71700 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: fbcon: Set fbdisplayi-mode to NULL when the mode is released CVE-2025-40323 kernel: smb: smbdirect: introduce smbdirectsocket.recvio.credits.available CVE-2026-31539 kernel:...

RockyLinux 10 : kernel (RLSA-2026:71602)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:71602 advisory. kernel: fbcon: Set fbdisplayi-mode to NULL when the mode is released CVE-2025-40323 kernel: libceph: fix potential use-after-free in havemonandosdmap...

CVE-2026-97928

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip the VMID 0 flush for VRAM Clear-on-release only runs on VRAM, which amdgputtmmapbuffer reaches via its direct MC address without programming a GART window, yet the wipe still forces a VMID 0 flush. On GFX11 e.g...