CVE-2026-31479 drm/xe: always keep track of remap prev/next

In the Linux kernel, the following vulnerability has been resolved: drm/xe: always keep track of remap prev/next During 3D workload, user is reporting hitting: 413.361679 WARNING: drivers/gpu/drm/xe/xevm.c:1217 at vmbindioctlopsunwind+0x1e2/0x2e0 xe, CPU7: vkd3dqueue/9925 413.361944 CPU: 7 UID:...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011173)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011173 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate the box size for the snooped cursor Invalid userspace dma surface copies cou...

ROS-20260407-73-0025

A vulnerability in the drm/amd/display component of the Linux kernel is related to pointer dereferencing errors. Exploitation of the vulnerability allows an attacker to cause a denial of service...

drm/amdgpu: Limit BO list entry count to prevent resource exhaustion

...

Linux Distros Unpatched Vulnerability : CVE-2026-23470

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/imagination: Fix deadlock in soft reset sequence The soft reset sequence is currently executed from the threaded IRQ handler, hence it cannot call disableir...

Linux Distros Unpatched Vulnerability : CVE-2026-23468

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Userspace can pass an arbitrary number of BO list entries via the bonumber field. Although...

SUSE CVE-2026-23418

In the Linux kernel, the following vulnerability has been resolved: drm/xe/regsr: Fix leak on xastore failure Free the newly allocated entry when xastore fails to avoid a memory leak on the error path. v2: use goto failfree. Bala cherry picked from commit 6bc6fec71ac45f52db609af4e62bdb96b9f5fadb...

CVE-2026-23471

In the Linux kernel, the following vulnerability has been resolved: drm: Fix use-after-free on framebuffers and property blobs when calling drmdevunplug When trying to do a rather aggressive test of igt's "xemoduleload --r reload" with a full desktop environment and game running I noticed a few...

CVE-2026-23430

A flaw was found in the Linux kernel, specifically within the drm/vmwgfx component. This vulnerability occurs when the kernel incorrectly overwrites the Kernel Mode Setting KMS surface dirty tracker. This error leads to a memory leak, which can degrade system performance and potentially cause...

CVE-2026-23468

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Userspace can pass an arbitrary number of BO list entries via the bonumber field. Although the previous multiplication overflow check prevents out-of-bounds...

CVE-2026-31390

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in xevmmadviseioctl When checkboargsaresane validation fails, jump to the new freevmas cleanup label to properly free the allocated resources. This ensures proper cleanup in this error path. cherry picked...

The vulnerability of the zynqmp_audio_init() function in the drivers/gpu/drm/xlnx/zynqmp_dp_audio.c driver module allows a hacker to cause a service failure in the Linux operating system’s Direct Rendering Infrastructure (DRI).

The vulnerability of the zynqmpaudioinit function in the drivers/gpu/drm/xlnx/zynqmpdpaudio.c driver lies in the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies

A flaw was found in the kernel subsystem handling of the DRM scheduler. Under certain error conditions, the function drmschedjobadddependency consumes a fence reference and then later erroneously attempts to free it again double free. This may lead to memory corruption and, in some configurations...

The vulnerability in the `dp_displayremove()` function of the `drivers/gpu/drm/msm/dp/dp_display.c` file is a flaw in the Direct Rendering Infrastructure (DRI) driver of the Linux operating system’s kernel. This flaw allows an attacker to cause a service failure.

The vulnerability of the dpdisplayremove function in the drivers/gpu/drm/msm/dp/dpdisplay.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause...

The vulnerability of the __drm_universal_plane_init() function in the drivers/gpu/drm/drm_plane.c file of the DRI support driver for the Linux operating system’s kernel allows a attacker to cause a service failure.

The vulnerability of the drmuniversalplaneinit function in the drivers/gpu/drm/drmplane.c file of the DRI support driver for the Linux operating system is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-23366

A flaw was found in the Linux kernel's Direct Rendering Manager DRM client component. This vulnerability occurs when the system attempts to destroy an uninitialized memory pointer, specifically the 'modes' variable within the drmclientmodesetprobe function, after a memory allocation failure. This...

The vulnerability of the svm_range_vram_node_new() function in the drivers/gpu/drm/amd/amdkfd/kfd_svm.c driver module allows a hacker to trigger a service failure. This vulnerability targets AMD GPU-based Linux operating system graphics cards with Direct Rendering Infrastructure (DRI) support.

The vulnerability of the svmrangevramnodenew function in the drivers/gpu/drm/amd/amdkfd/kfdsvm.c driver for supporting the Direct Rendering Infrastructure DRI of AMD graphics cards in Linux operating systems is related to improper initialization. Exploiting this vulnerability can allow an attacke...

ROS-20260323-73-0013

A vulnerability in the drm/amdkfd component of the Linux kernel is related to mutual blocking of execution threads. Exploitation of the vulnerability allows an attacker to cause a denial of service...

The vulnerability of the `radeon_fence_is_signaled()` function in the `drivers/gpu/drm/radeon/radeon_fence.c` file of the DRI graphics card driver for Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the radeonfenceissignaled function in the drivers/gpu/drm/radeon/radeonfence.c file of the Direct Rendering Infrastructure DRI graphics card driver for Linux operating systems is related to insufficient resource locking. Exploiting this vulnerability can allow an attacker to...

ROS-20260317-73-0008

A vulnerability in drivers/gpu/drm/v3d/v3ddrv.h, drivers/gpu/drm/v3d/v3dgem.c, and drivers/gpu/drm/v3d/v3d/v3dirq.c modules of the Linux operating system kernel is related to pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...