amdgpu_ttm_clear_buffer Heap Buffer Overflow DoS

The vulnerability of the amdgputtmclearbuffer function in the AMDGPU kernel driver for the Linux operating system is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

AMDGPU Kernel Heap Buffer Overflow DoS

The vulnerability in the drivers/gpu/drm/amd/amdgpu/gmcv120.c driver of the AMDGPU core in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

CLSA-2025-1747430081 Fix of 50 CVEs

CVE-url: https://ubuntu.com/security/CVE-2021-47352 - virtio-net: Add validation for used length CVE-url: https://ubuntu.com/security/CVE-2024-46745 - Input: uinput - reject requests with unreasonable number of slots CVE-url: https://ubuntu.com/security/CVE-2024-44952 - driver core: Fix ueventsho...

CLSA-2025-1747430034 Fix of 54 CVEs

Bionic update: upstream stable patchset 2022-04-13 LP: 1968932 // CVE- url: https://ubuntu.com/security/CVE-2022-23041 - xen/gnttab: fix gnttabendforeignaccess without page specified Bionic update: upstream stable patchset 2023-01-20 LP: 2003596 // CVE- url:...

kernel: drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()

A flaw was found in the Linux kernel's AMD GPU driver. A local user with administrative privileges could trigger a buffer overflow by requesting an oversized read operation through the debugfs interface. This vulnerability could lead to memory corruption, potentially causing a system crash and...

kernel: drm/amd: Guard against bad data for ATIF ACPI method

A flaw was found in the Linux kernel's drm/amd graphics driver. If a system's BIOS Basic Input/Output System provides malformed data in response to an ATIF AMD Thermal and Interrupt Function ACPI Advanced Configuration and Power Interface method call, it can lead to a NULL pointer dereference. Th...

kernel: drm/amdgpu: fix usage slab after free

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix usage slab after free +0.000021 BUG: KASAN: slab-use-after-free in drmschedentityflush+0x6cb/0x7a0 gpusched +0.000027 Read of size 8 at addr ffff8881b8605f88 by task amdpciunplug/2147 +0.000023 CPU: 6 PID: 2147...

kernel: drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number

A flaw was found in the drm/amdgpu component of the Linux kernel. An improper range check of the fbchannelnumber could allow a local attacker to perform an out-of-bounds read. This could lead to information disclosure or a denial of service DoS...

kernel: drm/amdgpu: Fix out-of-bounds write warning

A flaw was found in the drm/amdgpu component of the Linux kernel. This out-of-bounds write vulnerability occurs due to an improper check of the ring type value. A local attacker with high privileges could exploit this flaw to cause data corruption, system instability, or potentially achieve...

kernel: drm/amdgpu: fix mc_data out-of-bounds read warning

A flaw was found in the Linux kernel's drm/amdgpu component. A local attacker could exploit an out-of-bounds read vulnerability when processing mcdata. This could lead to the disclosure of sensitive information and potentially cause a denial of service...

kernel: drm/amd/amdgpu: Check tbo resource pointer

A flaw was found in the Linux kernel's drm/amd/amdgpu component. This vulnerability occurs due to insufficient validation of a tbo resource pointer. A local attacker could exploit this missing check to cause a system crash, leading to a denial of service...

kernel: drm/amdgpu: the warning dereferencing obj for nbio_v7_4

A flaw was found in the Linux kernel's drm/amdgpu component. A local attacker with low privileges could trigger a null pointer dereference by interacting with the nbiov74 functionality when the rasmanager object is null. This could lead to a system crash, resulting in a denial of service...

kernel: drm/amdgpu: fix the waring dereferencing hive

A flaw was found in the drm/amdgpu component of the Linux kernel. This vulnerability occurs due to a missing null pointer check when dereferencing amdgpuhiveinfo hive. A local attacker could exploit this flaw to cause a system crash, leading to a denial of service DoS...

kernel: drm/amdgpu/vcn: remove irq disabling in vcn 5 suspend

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: remove irq disabling in vcn 5 suspend We do not directly enable/disable VCN IRQ in vcn 5.0.0. And we do not handle the IRQ state as well. So the calls to disable IRQ and set state are removed. This effectively get...

kernel: drm/amdgpu: Fix smatch static checker warning

A flaw was found in the drm/amdgpu driver of the Linux kernel. A local attacker could exploit this vulnerability by triggering a null pointer dereference. This could lead to a system crash, causing a denial of service DoS on the affected system...

kernel: drm/amdgpu: add list empty check to avoid null pointer issue

A flaw was found in the Linux kernel's drm/amdgpu component. A missing list empty check in certain scenarios can lead to a null pointer dereference. This vulnerability could allow a local attacker to cause a system crash, resulting in a denial of service...

kernel: drm/amdgpu: Fix the warning division or modulo by zero

A flaw was found in the Linux kernel's amdgpu graphics driver. A local attacker could exploit a division by zero error by triggering an invalid partition mode. This could lead to a system crash, resulting in a Denial of Service DoS...

kernel: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported

A flaw was found in the Linux kernel's AMD GPU driver. A failure to properly handle error returns during ACPI Advanced Configuration and Power Interface object evaluation can result in a NULL pointer dereference when specific interface features are unsupported. A local user could exploit this fla...

SUSE CVE-2025-37852

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: handle amdgpucgscreatedevice errors in amdpowerplaycreate Add error handling to propagate amdgpucgscreatedevice failures to the caller. When amdgpucgscreatedevice fails, release hwmgr and return -ENOMEM to prevent nul...

CVE-2025-37852

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: handle amdgpucgscreatedevice errors in amdpowerplaycreate Add error handling to propagate amdgpucgscreatedevice failures to the caller. When amdgpucgscreatedevice fails, release hwmgr and return -ENOMEM to prevent nul...