CVE-2026-23468: Allocation of Resources Without Limits or Throttling

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Userspace can pass an arbitrary number of BO list entries via the bonumber field. Although the previous multiplication overflow check prevents out-of-bounds...

PT-2026-61080

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the DRM AMD GPU VCE component where patching could result in an incorrect address being written to the firmware if only one of the lo/hi address components is valid...

PT-2026-44322

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read issue exists in the drm/amdgpu/vcn4 component when parsing decoding messages. This occurs because the system fails to properly check bounds against the end of the...

PT-2026-44353

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read issue exists in the drm/amdgpu/vcn3 component when parsing decoding messages. This occurs because the system fails to properly check bounds against the end of the...

PT-2026-44341

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bounds checking issue exists in the Linux kernel DRM AMD GPU driver. The uvd, vce, and vcn components access the Indirect Buffer IB at predefined offsets without verifying if the IB is...

AMD GPU DRI Driver Heap Buffer Overflow DoS

The vulnerability of the sdmav40swfini function in the driver/gpu/drm/amd/amdgpu/sdmav40.c source code of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to reading memory beyond the allocated buffer. Exploiting this vulnerability could...

Linux amdgpu SMU Internal Buffer Overflow

The vulnerability in the drivers/gpu/drm/amd/pm/swsmu/smuinternal.h file of the amdgpu driver in the Linux operating system is related to a memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

Linux Distros Unpatched Vulnerability : CVE-2026-23358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: Fix error handling in slot reset If the device has not recovered after slot reset is called, it goes to out label for error handling. There it could...

amdgpu_userq_walk_and_Drop_fence_drv Heap Buffer Overflow DoS

The vulnerability of the amdgpuuserqwalkand Dropfencedrv function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserqfence.c driver for AMD GPU cores in Linux operating systems is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow ...

AMD GPU Kernel DRI Heap Buffer Overflow DoS

The vulnerability of the gmcv110hwfini function in the drivers/gpu/drm/amd/amdgpu/gmcv110.c driver for the Direct Rendering Infrastructure DRI of AMD GPU cores in the Linux operating system involves disclosing confidential information. Exploiting this vulnerability could allow an attacker to caus...

amdgpu_amdkfd_gpuvm_import_dmabuf Heap Buffer Overflow DoS

The vulnerability of the amdgpuamdkfdgpuvmimportdmabuf function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to improper memory release. Exploiting this vulnerability can all...

SUSE CVE-2026-23338

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings Userspace can either deliberately pass in the too small numfences, or the required number can legitimately grow between the two calls to the userq wait...

SUSE CVE-2026-23358

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix error handling in slot reset If the device has not recovered after slot reset is called, it goes to out label for error handling. There it could make decision based on uninitialized hive pointer and could result i...

CVE-2026-23358

A flaw was found in the Linux kernel's drm/amdgpu driver. During slot reset error handling, the system could attempt to access an uninitialized list due to an uninitialized pointer. This could lead to system instability or a denial of service...

CVE-2026-23338

A flaw was found in the Linux kernel, specifically within the drm/amdgpu/userq component. This vulnerability allows a local user to intentionally or unintentionally trigger kernel warnings. This occurs when the user provides an incorrect number of fences during a userq wait ioctl operation. While...

EUVD-2026-15304

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings Userspace can either deliberately pass in the too small numfences, or the required number can legitimately grow between the two calls to the userq wait...

CVE-2026-23358

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix error handling in slot reset If the device has not recovered after slot reset is called, it goes to out label for error handling. There it could make decision based on uninitialized hive pointer and could result i...

UBUNTU-CVE-2026-23338

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings Userspace can either deliberately pass in the too small numfences, or the required number can legitimately grow between the two calls to the userq wait...

UBUNTU-CVE-2026-23358

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix error handling in slot reset If the device has not recovered after slot reset is called, it goes to out label for error handling. There it could make decision based on uninitialized hive pointer and could result i...

CVE-2026-23358

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix error handling in slot reset If the device has not recovered after slot reset is called, it goes to out label for error handling. There it could make decision based on uninitialized hive pointer and could result i...