CVE-2026-68234

The CVE describes a bug in drm/amdgpu where amdgpu_bo_create_reserved pins and reserves a BO even when a non-NULL pointer is passed, leading to pin_count increments on repeated uses and eventual BO leaks because teardown unpins only once. The fix makes pinning occur only at creation, so repeated ...

CVE-2026-68115

The CVE-2026-68115 entry relates to the Linux kernel DRM/AMDGPU gfx10 driver. The issue was that BUG_ON() caused a kernel crash and has been replaced with WARN_ON(), so the code no longer forces a crash in these cases. This is a code fix (cherry-picked from commit ac6f00beb658239bced4aaed9efbb04a...

EUVD-2026-55496

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx10: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit ac6f00beb658239bced4aaed9efbb04a35348d48...

EUVD-2026-55495

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12.1: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit e4d99e04b2e9b13b97d3b17804c735f62689db23...

CVE-2026-68114

The CVE-2026-68114 entry concerns the Linux kernel DRM AMDGPU gfx12.1 where a BUG_ON() path was replaced with WARN_ON(), preventing a kernel crash in those cases. The fix is captured in the cherry-picked commit e4d99e04b2e9b13b97d3b17804c735f62689db23, and the changes are reflected in the related...

CVE-2026-68113

CVE-2026-68113: In the Linux kernel (drm/amdgpu/gfx12), the bug has been resolved by replacing BUG_ON() with WARN_ON() to avoid kernel crashes in these cases. The fix prevents an intentional crash when a condition is met, by issuing a warning instead of triggering a crash. The cherry-picked commi...

EUVD-2026-55494

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit f952076f76d62f783e8ba4995a7c400d39354ccf...

EUVD-2026-55493

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9.4.3: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit 5676593d08998d7a6d9e2d51d6b54b3820e3755c...

CVE-2026-68112

The CVE-2026-68112 entry concerns the Linux kernel driver path drm/amdgpu/gfx9.4.3 where a BUG_ON() assertion was replaced with WARN_ON(), indicating the code no longer crashes the kernel for those checks. This is a corrective patch aimed at preventing kernel panics by converting a hard failure i...

EUVD-2026-55492

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit b71604f8685b0eba07866f4e8dc30f93e1931054...

CVE-2026-68111

The CVE-2026-68111 issue affects the Linux kernel's drm/amdgpu/gfx9 path, where a BUG_ON() could crash the kernel. The fix replaces BUG_ON() with WARN_ON(), avoiding a crash in these cases. The change (cherry-picked from commit b71604f8685b0eba07866f4e8dc30f93e1931054) has been included in stable...

EUVD-2026-55491

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma4.4.2: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit fa4f86a148271e325e95287630a3a15a9cd35fdc...

CVE-2026-68110

The CVE-2026-68110 entry concerns the Linux kernel component drm/amdgpu/sdma4.4.2. The root cause involved using BUG_ON() in code paths where a crash was previously deemed unnecessary; the fix replaces BUG_ON() with WARN_ON(), so kernel crashes are avoided for these cases. The information indicat...

CVE-2026-68109

CVE-2026-68109 : In the Linux kernel’s drm/amdgpu/sdma7.1 path, the vulnerability was resolved by replacing a failing assertion: replace BUG_ON() with WARN_ON() so the kernel no longer crashes in these cases. The commit cherry-picks the fix (c4f230b51cf2d3e7e8b1c800331f3dbed2a9e3f5). Affected com...

CVE-2026-68107

CVE-2026-68107 affects the Linux kernel’s DRM AMDGPU VCN4 path. The issue arises from rereading the IB parameter length; the fix reuses the length returned by vcn_v4_0_enc_find_ib_param() instead of re-reading it from the IB, thereby preventing a TOCTOU condition if IB contents change between rea...

CVE-2026-68106

The CVE-2026-68106 entry describes a Linux kernel (drm/amdgpu) issue where, if width or height is less than 16, width_in_mb/height_in_mb become 0 and lead to a division-by-zero when computing num_dpb_buffer in H264 and H264 Perf decode paths. The fix adds validation to reject frames with width &l...

EUVD-2026-55485

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: invoke pmgenpdremove before freeing genpd Call pmgenpdremove to unregister from global list prior to releasing acpgenpd memory, and clear the pointer after free. cherry picked from commit...

CVE-2026-68104

The CVE-2026-68104 entry concerns the Linux kernel DRM/AMDGPU subsystem. Affected path: before freeing ACP GenPD memory, pm_genpd_remove() was not invoked to unregister from the global list, risking use-after-free or stale pointers. The fix calls pm_genpd_remove() prior to freeing genpd and clear...

EUVD-2026-55484

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: reject mapping a reserved doorbell to a new queue When creating an user-queue, the user space provides a doorbell BO handle and an offset within the bo to obtain a doorbell. However current implementation using...

CVE-2026-68103

The CVE-2026-68103 entry concerns the Linux kernel DRM/AMDGPU: the mapping of a doorbell for user-queues could be overwritten. The root cause was using xa_store_irq() to store a doorbell, allowing a later queue with the same BO and offset to overwrite an existing queue/doorbell mapping. A fix rep...