495756 matches found
CVE-2026-68273
CVE-2026-68273 affects the drm/amdgpu component in the Linux kernel. The issue concerns context pstate override handling, particularly in amdgpu_ctx_init() and context exit, where the code did not reliably hold the adev->pm.stable_pstate_ctx_lock and could mismanage the stored override state. ...
EUVD-2026-55374
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix context pstate override handling There are several problems in the context pstate handling code. The most serious ones are potential use-after-free and NULL pointer dereferences at context initialization time. Bot...
CVE-2026-68272
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate CPGFXSHADOW chunk size in CS pass1 Add a minimum-length check for the AMDGPUCHUNKIDCPGFXSHADOW chunk in amdgpucspass1, matching the gate already present for the IB, FENCE and BOHANDLES chunk types. The...
CVE-2026-68272
The CVE-2026-68272 affects the Linux kernel DRM/AMDGPU stack. It introduces a minimum-length validation for the AMDGPU_CHUNK_ID_CP_GFX_SHADOW chunk in amdgpu_cs_pass1(), so undersized chunks (length_dw == 0) are now rejected with -EINVAL before pass2 dereferences data. Previously, a zero-size poi...
EUVD-2026-55373
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate CPGFXSHADOW chunk size in CS pass1 Add a minimum-length check for the AMDGPUCHUNKIDCPGFXSHADOW chunk in amdgpucspass1, matching the gate already present for the IB, FENCE and BOHANDLES chunk types. The...
CVE-2026-68272 drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate CPGFXSHADOW chunk size in CS pass1 Add a minimum-length check for the AMDGPUCHUNKIDCPGFXSHADOW chunk in amdgpucspass1, matching the gate already present for the IB, FENCE and BOHANDLES chunk types. The...
CVE-2026-68272 drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate CPGFXSHADOW chunk size in CS pass1 Add a minimum-length check for the AMDGPUCHUNKIDCPGFXSHADOW chunk in amdgpucspass1, matching the gate already present for the IB, FENCE and BOHANDLES chunk types. The...
CVE-2026-68269
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controlled parallel submission slot. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry...
CVE-2026-68269 drm/i915/gem: Add missing nospec on parallel submit slot
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controlled parallel submission slot. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry...
CVE-2026-68269
The CVE concerns the Linux kernel component drm/i915/gem where a missing nospec mitigation existed in the parallel submit slot. The vulnerability, resolved by adding the Spectre mitigation for the userspace-controlled parallel submission slot, was identified via AI-assisted static analysis and co...
EUVD-2026-55370
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controlled parallel submission slot. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry...
CVE-2026-68269 drm/i915/gem: Add missing nospec on parallel submit slot
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controlled parallel submission slot. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry...
CVE-2026-68268 drm/xe: Return error on non-migratable faults requiring devmem
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Return error on non-migratable faults requiring devmem Non-migratable faults that require devmem incorrectly jump to the 'out' label, which squashes the error code intended to be returned to the upper layers. Fix this by...
CVE-2026-68268
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Return error on non-migratable faults requiring devmem Non-migratable faults that require devmem incorrectly jump to the 'out' label, which squashes the error code intended to be returned to the upper layers. Fix this by...
EUVD-2026-55369
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Return error on non-migratable faults requiring devmem Non-migratable faults that require devmem incorrectly jump to the 'out' label, which squashes the error code intended to be returned to the upper layers. Fix this by...
CVE-2026-68268
CVE-2026-68268 affects the Linux kernel DRM/XE path. Non-migratable faults that require devmem were incorrectly jumping to the ‘out’ label, which suppressed the intended error code returned to upper layers. The remediation, as noted in the CVE description, is to return -EACCES instead, fixing the...
CVE-2026-68268 drm/xe: Return error on non-migratable faults requiring devmem
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Return error on non-migratable faults requiring devmem Non-migratable faults that require devmem incorrectly jump to the 'out' label, which squashes the error code intended to be returned to the upper layers. Fix this by...
CVE-2026-68267
In the Linux kernel, the following vulnerability has been resolved: drm/xe/rtp: Add RINGFORCETONONPRIVDENY to OA whitelists Unconditionally whitelisting OA registers is a security violation. Set RINGFORCETONONPRIVDENY bit in OA nonpriv slots, so that OA registers don't get whitelisted by default...
CVE-2026-68267
The CVE-2026-68267 entry concerns the Linux kernel DRM/xe/rtp component. The issue is that OA registers could be whitelisted by default after probe, GT reset, resume, and engine reset, which is a security violation. The root cause is unconditional whitelisting of OA registers. The fix (cherry-pic...
CVE-2026-68267 drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists
In the Linux kernel, the following vulnerability has been resolved: drm/xe/rtp: Add RINGFORCETONONPRIVDENY to OA whitelists Unconditionally whitelisting OA registers is a security violation. Set RINGFORCETONONPRIVDENY bit in OA nonpriv slots, so that OA registers don't get whitelisted by default...