CVE-2026-99261

A flaw was found in the Linux kernel's AMD GPU driver amdgpu. When managing memory for user queues, the driver reserves an insufficient number of synchronization fence slots during buffer object eviction. A local user can exploit this vulnerability to trigger a kernel crash, resulting in a Denial...

CVE-2026-69043

In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption...

CVE-2026-69043

In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption...

EUVD-2026-117280

In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption...

CVE-2026-69043

In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption...

CVE-2026-69043

A resource management error exists in the Samsung Exynos GPU driver due to improper synchronization during buffer object creation and destruction. This vulnerability can lead to memory corruption . Specifically, the SAMSUNG Exynos 2200 is identified as an affected component. While the vulnerabili...

CVE-2026-69043: Samsung Semiconductor: In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory…

In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption...

PT-2026-137370

In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Allow entries in BO caches to be freed When a buffer object is pinned via host1xbopin with a cache, the resulting mapping is kept in the cache so it can be reused on subsequent pins. Each mapping held a reference to...

CLEANSTART-2024-TE55540 texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information lea...

CVE-2021-23981 affects multiple packages. A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash. See references for individual vulnerability...

CVE-2026-99145

A flaw was found in the Linux kernel's Intel Xe graphics driver drm/xe. A local user could exploit this vulnerability by altering the memory state of a pinned graphics buffer object, causing the driver to unconditionally transfer pages between memory tracking pools. This issue triggers an integer...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unreserve bo if queue update failed The error handling path should unreserve bo and then return a failure. Cherry picked from commit c24afed7de9ecce341825d8ab55a43a254348b33...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/amdgpu: The parameters of bo mapping operations need to be clarified. The parameters of amdgpuvmbomap/replacemap/clearingmappings should be verified in a single common place...

Astra Linux – vulnerability in linux-5.10

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: avoid a use-after-free when BO init fails nouveauboinit is backed by ttmboinit and passes its return value back to the caller. In case of failure, ttmboinit invokes the provided destructor, which should de-initialize...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fixed corruption of the shrinker list caused by the madvise IOCTL. Calling the madvise IOCTL twice on BO causes corruption of the memory shrinker list, leading to a kernel crash. This occurs because BO is already on...

CVE-2026-93047 drm/v3d: Associate BOs with every job that accesses them

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Associate BOs with every job that accesses them A submission can expand into a chain of jobs e.g. bin + render + cache clean. Implicit synchronization in v3dsubmitlockreservations is gated on each job's bo, but the BO li...

Astra Linux – Vulnerability in Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fixed the error path in panfrostmmumapfaultaddr Subject: PATCH drm/panfrost: Fixed the error path in panfrostmmumapfaultaddr If some of the page allocations fail, we should not release the previous references to tho...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fixed a page fault in ivpubounbindallbosfromcontext...

Astra Linux – Vulnerability in Firefox and Thunderbird

The texture upload of a Pixel Buffer Object could have caused WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash. This vulnerability affects Firefox ESR 78.9, Firefox 87, and Thunderbird 78.9...

SUSE CVE-2026-74381

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Allow entries in BO caches to be freed When a buffer object is pinned via host1xbopin with a cache, the resulting mapping is kept in the cache so it can be reused on subsequent pins. Each mapping held a reference to...