CVE-2026-80539

A flaw was found in the Linux kernel's drm/amdgpu graphics driver. When processing graphics commands, the driver fails to properly handle multiple "FENCE chunks" in a single submission. This oversight leads to a memory leak, where system resources are not released as expected. A local attacker...

AZL-97752 CVE-2026-80541 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate GEMCREATE domain combinations AMDGPUGEMCREATE checked domain bits against AMDGPUGEMDOMAINMASK, but did not validate domain combinations. Userspace could combine CPU|GTT|VRAM with DOORBELL, GDS, GWS, or OA,...

CVE-2026-80541 drm/amdgpu: validate GEM_CREATE domain combinations

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate GEMCREATE domain combinations AMDGPUGEMCREATE checked domain bits against AMDGPUGEMDOMAINMASK, but did not validate domain combinations. Userspace could combine CPU|GTT|VRAM with DOORBELL, GDS, GWS, or OA,...

The vulnerability of the amdgpu_amdkfd_submit_ib() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c driver for AMD GPU cores in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpuamdkfdsubmitib function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfd.c driver for AMD GPU cores in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the amdgpu_bo_create_list_entry_array() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c source file of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the amdgpubocreatelistentryarray function in the drivers/gpu/drm/amd/amdgpu/amdgpubolist.c source file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system leads to unmanageable resource consumption. Exploiting this vulnerability c...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Handle errors from amdgpucgscreatedevice in amdpowerplaycreate. Add error handling to propagate the failures of amdgpucgscreatedevice to the caller. When amdgpucgscreatedevice fails, release hwmgr and return -ENOMEM t...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: The calltrace warning in amddrmbuddyfini has been fixed. The following call trace was observed when the amdgpu driver was removed. This issue arises because the BOs allocated for psp are not freed until the driver is...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Avoid using a null object of the framebuffer. Instead of directly using state-fb-obj0, obtain the object from the framebuffer by calling drmgemfbgetobj. Return an error code when the object is null to avoid using a nu...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fixed the calltrace warning in psphwfini. The call trace occurs when the amdgpu is removed after a mode1 reset. During a mode1 reset, from suspend to resume, there is no need to reinitialize the ta firmware buffer,...

kernel: drm/amdgpu: zero-initialize GART table on allocation

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. When allocating a Graphics Address Remapping Table GART, the memory was not properly initialized. This could allow a local attacker to potentially access uninitialized memory, leading to information disclosure or unexpected system...

The vulnerability of the amdgpu_device_ip_init() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_device.c source file of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the amdgpudeviceipinit function in the drivers/gpu/drm/amd/amdgpu/amdgpudevice.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: mm/slub: avoid accessing metadata when pointer is invalid in objecterr CVE-2025-39902 kernel: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset CVE-2026-43206 kernel: crypto: ccp -...

CVE-2026-72095 dma-fence: Make dma_fence_dedup_array() robust against 0-count input

In the Linux kernel, the following vulnerability has been resolved: dma-fence: Make dmafencededuparray robust against 0-count input dmafencededuparray returns 1 when called with numfences == 0: the for-loop body never executes, j stays at 0, and the final return ++j yields 1. This contradicts bot...

DEBIAN-CVE-2026-68436

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate struct dc struct dc has grown large over time most of it the two inlined dcscratchspace copies and now sits close to the page allocator's 4 MiB contiguous allocation limit. Its actual siz...

CVE-2026-68436 drm/amd/display: use kvzalloc to allocate struct dc

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate struct dc struct dc has grown large over time most of it the two inlined dcscratchspace copies and now sits close to the page allocator's 4 MiB contiguous allocation limit. Its actual siz...

CVE-2026-68430

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx8: drop unecessary BUGON There's no need to crash the kernel for this case. cherry picked from commit 4d7c25208ca612b754f3bf39e9f16e725b828891...

Linux Distros Unpatched Vulnerability : CVE-2026-68101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: fix check in amdgpuhmminvalidategfx For a short moment during alloc/free the userptr BO is not part of his VM, so bo-vmbo can be NULL. Keep a...

CVE-2026-68105

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. When the Multimedia Engine Scheduler MES fails to initialize during driver loading, the Kernel Input Queue KIQ ring is incorrectly marked as ready. This can lead to a kernel panic, resulting in a Denial of Service DoS to the system...

CVE-2026-68110

A flaw was found in the Linux kernel's amdgpu graphics driver, specifically within the sdma4.4.2 component. This vulnerability could allow a local attacker to trigger a system crash by exploiting certain unhandled error conditions. The issue stems from the use of a BUGON macro, which forces a...

CVE-2026-68246

A flaw was found in the Linux kernel. A vulnerability in the drm/amdgpu/gfx11 graphics driver could cause the system to crash. This issue arises from a condition that, when met, would trigger an error-handling mechanism designed to halt the kernel BUGON. An attacker with local access could...