Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma7.0: replace BUGON with WARNON There’s no need to crash the kernel for these cases. cherry picked from commit 9723a8bed3aa251a26bee4583bac9d8fb064dd44...

CVE-2026-99106

A flaw was found in the Linux kernel's AMDGPU driver. This vulnerability allows a local attacker to cause a Denial of Service DoS through kernel memory exhaustion. When command submission operations fail during certain error-handling paths, allocated memory ranges and buffer object references are...

CVE-2026-99119

A flaw was found in the Linux kernel's AMDGPU driver. A local user could exploit this flaw by creating and evicting graphics buffer objects before initializing a user queue, which improperly validates evicted buffers and omits required reference counts. This issue can lead to memory corruption or...

CVE-2026-80909

A flaw was found in the Linux kernel's amdgpu driver. By sending a specially crafted Universal Video Decoder UVD message with an invalid number of H.265 references, a local attacker could trigger an integer overflow. This overflow could lead to a denial of service by causing a system crash or...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.18.53. This vulnerability stems from the amdgpu driver failing to limit the nesting depth of ATOM command tables, potentially leading to a kernel crash...

CVE-2026-93139

A flaw was found in the AMDGPU driver within the Linux kernel. An issue with the hungqueuedbarray loop limit for multi-XCC Cross-Chiplet Interconnect GPUs can leave array entries uninitialized. This can lead to a null pointer dereference when accessing arrays indexed by XCC ID greater than or equ...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fixed the calltrace warning in psphwfini. The call trace occurs when the amdgpu is removed after a mode1 reset. During a mode1 reset, from suspend to resume, there is no need to reinitialize the ta firmware buffer,...

Astra Linux – vulnerability in linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix shift out-of-bounds issue 567.613292 The shift exponent 255 is too large for a 64-bit type ‘long unsigned int’ 567.614498 CPU: 5 PID: 238 Comm: kworker/5:1 Tainted: G OE 6.2.0-34-generic 3422.04.1-Ubuntu 567.61450...

Astra Linux – vulnerability in linux-5.10, linux

In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu/amdgpucs: fix refcount leak of a dmafence obj This issue occurs in an error path within amdgpucsfencetohandleioctl. When info-in.what falls into the default case, the function simply returns -EINVAL without...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq input args. This will assist in validating the userq input arguments and rejecting invalid userq requests during IOCTLs...

CVE-2026-98389

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. During recovery from a graphics processing unit GPU reset, background power management tasks can attempt to change power profiles before the reset completes. This improper synchronization causes hardware register access while reset loc...

CVE-2026-97426

A flaw was found in the Linux kernel's AMDGPU driver. When processing input for the SmartShift bias sysfs configuration interface, an input parsing failure causes the driver to release power management access without having first acquired it. A local user with write access to this interface could...

CVE-2026-97428

A flaw was found in the Linux kernel's AMDGPU driver. During the parsing of Field Replaceable Unit FRU data from EEPROM, the driver does not properly validate boundaries against the actual data length. An attacker capable of supplying truncated or malformed FRU data can trigger an out-of-bounds...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.2 contains security vulnerabilities. These vulnerabilities stem from the drm/amdgpu driver, which allows for out-of-bound reads during TLV parsing in FRU PIA. This occurs when the driver does not limit the reading based on the actual length of the EEPROM data...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fixed a double-free in sidpminit When the allocation of adev-pm.dpm.dynstate.vddcDependenceondispclk.entries fails, amdgpufreeextendedpowertable is called to free some fields of adev. However, when the control flow...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: amdgpu/pm: prevented array underflow in vega20odneditdpmtable In the PPODEDITVDDCCURVE case, the “inputindex” variable is capped at 2, but its negative values are not checked, resulting in an out-of-bounds read. This value comes...

kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. An issue in the amdgpuamdkfdsubmitib function allows a local user to trigger a use-after-free vulnerability. This occurs because a fence reference is incorrectly released before waiting for job completion, potentially freeing the memor...

kernel: drm/amdgpu: Fix use-after-free race in VM acquire

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. This vulnerability involves a timing issue, known as a race condition, during the process of acquiring a Virtual Machine VM. When multiple processes attempt to access the same VM simultaneously, a local attacker could exploit this flaw...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107285)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107285 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix gart.bo pincount leak gmcv9,100gartdisable isn't called matched with correspoding...

Linux Distros Unpatched Vulnerability : CVE-2026-80919

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive wwmutex acquire in amdgpudevcoredumpformat When dumping IB conten...