AlmaLinux 8 : kernel-rt (ALSA-2026:71330)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:71330 advisory. kernel: drm/amdgpu: Fix fence put before wait in amdgpuamdkfdsubmitib CVE-2026-31566 kernel: netfilter: nfqueue: hold bridge skb-dev while queued...

RHEL 8 : kernel-rt (RHSA-2026:71330)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71330 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

AlmaLinux 8 : kernel (ALSA-2026:71329)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:71329 advisory. kernel: drm/amdgpu: Fix fence put before wait in amdgpuamdkfdsubmitib CVE-2026-31566 kernel: netfilter: nfqueue: hold bridge skb-dev while queued...

PT-2026-104878

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate and share PSP fw pri buf copies via psp copy fw Change psp copy fw from void to int: return -ENODEV when drm dev enter fails, and -EINVAL when the image size is zero or larger than the 1 MiB PSP private buffe...

PT-2026-98062

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component regarding the parsing of Field Replaceable Unit FRU Product Information Area PIA data. The original implementation used an open-coded...

Linux Distros Unpatched Vulnerability : CVE-2026-97426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error Return the parse error before acquiring PM access. CVE-2026-97426 Note that Nessus...

PT-2026-104966

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix buffer overflow during vBIOS update Clamp the buffer postion to write by setting the bin attribute to the maximum buffer size so that VFS layer will block the out-of-bounds accessing...

PT-2026-98059

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow occurs during a vBIOS update in the drm/amdgpu component. The issue is addressed by clamping the buffer position to write by setting the bin attribute to the maximum...

PT-2026-98060

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/pm component where the SmartShift bias sysfs store fails to handle the PM refcount correctly during a parse error. The system should return the parse...

Linux Distros Unpatched Vulnerability : CVE-2026-97494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: validate and share PSP fwpribuf copies via pspcopyfw Change pspcopyfw from void to int: return -ENODEV when drmdeventer fails, and -EINVAL when the...

Linux Distros Unpatched Vulnerability : CVE-2026-93809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: flush pending RCU callbacks on module unload Call rcubarrier in module exit to wait for outstanding callrcu callbacks before freeing module text,...

PT-2026-98058

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/ras component where cp ecc error irq is acquired in amdgpu gfx ras late init but released in gfx v9 0 hw fini. This mismatch requires the release site t...

CVE-2026-97493

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Bound GPIO I2C table entry count from VBIOS Reject undersized tables and cap the derived entry count to AMDGPUMAXI2CBUS so we do not overrun adev-i2cbus or walk an absurd number of entries on corrupt size fields...

CVE-2026-97498

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction mqd and fw objects are queue core objects which should remain valid and never be unmapped and evicted for user queues to work properly. During eviction if these buffers...

CVE-2026-93809

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: flush pending RCU callbacks on module unload Call rcubarrier in module exit to wait for outstanding callrcu callbacks before freeing module text, preventing late callback execution in freed memory. BUG: unable to hand...

CVE-2026-97494

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate and share PSP fwpribuf copies via pspcopyfw Change pspcopyfw from void to int: return -ENODEV when drmdeventer fails, and -EINVAL when the image size is zero or larger than the 1 MiB PSP private buffer. Repla...

CVE-2026-97424

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: add rassuspend callback and use it for cpeccerrorirq cpeccerrorirq is acquired in amdgpugfxraslateinit but released in gfxv90hwfini, so the put site has to query amdgpuirqenabled because the get is skipped on SR-I...

CVE-2026-97426

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error Return the parse error before acquiring PM access...

CVE-2026-97425

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix buffer overflow during vBIOS update Clamp the buffer postion to write by setting the bin attribute to the maximum buffer size so that VFS layer will block the out-of-bounds accessing...

CVE-2026-97428

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: harden FRU PIA parsing with bounded helpers Replace the open-coded TLV walk with frupiaadvance and frupiacopyfield helpers that bound every read by the actual EEPROM data length, preventing out-of-bounds reads on...