drm/amdgpu: Limit BO list entry count to prevent resource exhaustion

...

Linux Distros Unpatched Vulnerability : CVE-2026-23470

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/imagination: Fix deadlock in soft reset sequence The soft reset sequence is currently executed from the threaded IRQ handler, hence it cannot call disableir...

Linux Distros Unpatched Vulnerability : CVE-2026-23468

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Userspace can pass an arbitrary number of BO list entries via the bonumber field. Although...

SUSE CVE-2026-23418

In the Linux kernel, the following vulnerability has been resolved: drm/xe/regsr: Fix leak on xastore failure Free the newly allocated entry when xastore fails to avoid a memory leak on the error path. v2: use goto failfree. Bala cherry picked from commit 6bc6fec71ac45f52db609af4e62bdb96b9f5fadb...

CVE-2026-23471

In the Linux kernel, the following vulnerability has been resolved: drm: Fix use-after-free on framebuffers and property blobs when calling drmdevunplug When trying to do a rather aggressive test of igt's "xemoduleload --r reload" with a full desktop environment and game running I noticed a few...

CVE-2026-23430

A flaw was found in the Linux kernel, specifically within the drm/vmwgfx component. This vulnerability occurs when the kernel incorrectly overwrites the Kernel Mode Setting KMS surface dirty tracker. This error leads to a memory leak, which can degrade system performance and potentially cause...

CVE-2026-23468

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Userspace can pass an arbitrary number of BO list entries via the bonumber field. Although the previous multiplication overflow check prevents out-of-bounds...

CVE-2026-31390

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in xevmmadviseioctl When checkboargsaresane validation fails, jump to the new freevmas cleanup label to properly free the allocated resources. This ensures proper cleanup in this error path. cherry picked...

The vulnerability of the msm_dsi_host_init() function in the drivers/gpu/drm/msm/dsi/dsi_host.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the msmdsihostinit function in the drivers/gpu/drm/msm/dsi/dsihost.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the amdgpu_vram_mgr_new() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c driver module allows a hacker to cause a service failure in AMD GPU-based Linux operating system DRI (Direct Rendering Infrastructure) kernels.

The vulnerability of the amdgpuvrammgrnew function in the drivers/gpu/drm/amd/amdgpu/amdgpuvrammgr.c driver module related to AMD GPU cores in Linux operating systems is associated with synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to caus...

The vulnerability of the zynqmp_audio_init() function in the drivers/gpu/drm/xlnx/zynqmp_dp_audio.c driver module allows a hacker to cause a service failure in the Linux operating system’s Direct Rendering Infrastructure (DRI).

The vulnerability of the zynqmpaudioinit function in the drivers/gpu/drm/xlnx/zynqmpdpaudio.c driver lies in the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the msm_dp_modeset_init() function in the driver/gpu/drm/msm/dp/dp_display.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the msmdpmodesetinit function in the driver/gpu/drm/msm/dp/dpdisplay.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to memory writing beyond the allowed buffer data size limits. Exploiting this vulnerability could allow an...

kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies

A flaw was found in the kernel subsystem handling of the DRM scheduler. Under certain error conditions, the function drmschedjobadddependency consumes a fence reference and then later erroneously attempts to free it again double free. This may lead to memory corruption and, in some configurations...

The vulnerability in the dpu_crtc_reset() function of the drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c driver module of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the dpucrtcreset function in the drivers/gpu/drm/msm/disp/dpu1/dpucrtc.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the msm_drm_init() function in the driver/gpu/drm/msm/msm_drv.c file, a part of the Direct Rendering Infrastructure (DRI) driver infrastructure for the Linux operating system, allows a malicious actor to cause a service failure.

The vulnerability of the msmdrminit function in the driver/gpu/drm/msm/msmdrv.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux operating system’s kernel, relates to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause service...

The vulnerability of the msm_hdmi_init() function in the drivers/gpu/drm/msm/hdmi/hdmi.c driver of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the msmhdmiinit function in the drivers/gpu/drm/msm/hdmi/hdmi.c driver for the Direct Rendering Infrastructure DRI component of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failur...

The vulnerability in the `dp_displayremove()` function of the `drivers/gpu/drm/msm/dp/dp_display.c` file is a flaw in the Direct Rendering Infrastructure (DRI) driver of the Linux operating system’s kernel. This flaw allows an attacker to cause a service failure.

The vulnerability of the dpdisplayremove function in the drivers/gpu/drm/msm/dp/dpdisplay.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause...

The vulnerability of the mdp5_planeDestroyState() function in the drivers/gpu/drm/msm/disp/mdp5/mdp5_plane.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the mdp5planeDestroyState function in the drivers/gpu/drm/msm/disp/mdp5/mdp5plane.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an...

The vulnerability of the mtk_ovl_layer_off() function in the drivers/gpu/drm/mediatek/mtk_disp_drv.h driver module allows a hacker to cause a service failure. This vulnerability relates to the Direct Rendering Infrastructure (DRI) support for Mediatek graphics cards in Linux operating systems.

The vulnerability of the mtkovllayeroff function in the drivers/gpu/drm/mediatek/mtkdispdrv.h file, a driver for supporting Direct Rendering Infrastructure DRI in Mediatek graphics cards, related to Linux operating systems, stems from improper resource cleanup or release. Exploiting this...

The vulnerability in the vm_access() function of the drivers/gpu/drm/i915/gem/i915_gem_mman.c file, a driver for supporting Direct Rendering Infrastructure (DRI) in the Linux operating system’s kernel, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the vmaccess function in the drivers/gpu/drm/i915/gem/i915gemmman.c file, a driver for supporting Direct Rendering Infrastructure DRI in the Linux kernel, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...