PT-2026-5542

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s DRM/GUD subsystem. Specifically, a NULL pointer dereference can occur on display disconnect due to the drm atomic helper disable all function setting...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993099)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993099 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/meson: Fix refcount bugs in mesonvpuhasavailableconnectors In this function, there are two...

UBUNTU-CVE-2022-50884

In the Linux kernel, the following vulnerability has been resolved: drm: Prevent drmcopyfield to attempt copying a NULL pointer There are some struct drmdriver fields that are required by drivers since drmcopyfield attempts to copy them to user-space via DRMIOCTLVERSION. But it can be possible th...

CVE-2022-50884

In the Linux kernel, the following vulnerability has been resolved: drm: Prevent drmcopyfield to attempt copying a NULL pointer There are some struct drmdriver fields that are required by drivers since drmcopyfield attempts to copy them to user-space via DRMIOCTLVERSION. But it can be possible th...

CVE-2022-50867

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Fix kvzalloc vs statekcalloc usage adrenoshowobject is a trap! It will re-allocate the pointer it is passed on first call, when the data is ascii85 encoded, using kvmalloc/ kvfree. Which means the data passed to it...

CVE-2022-50847 drm/bridge: it6505: Initialize AUX channel in it6505_i2c_probe

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: it6505: Initialize AUX channel in it6505i2cprobe During device boot, the HPD interrupt could be triggered before the DRM subsystem registers it6505 as a DRM bridge. In such cases, the driver tries to access AUX channe...

SUSE CVE-2023-54091

In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drmclienttargetcloned dmtmode is allocated and never freed in this function. It was found with the ast driver, but most drivers using generic fbdev setup are probably affected. This fixes the...

CVE-2023-54018

CVE-2023-54018 — Linux kernel : The vulnerability resides in drm/msm/hdmi where alloc_ordered_workqueue may return NULL. The code fails to check this return value, leading to NULL pointer dereferences in hdmi_hdcp.c and hdmi_hpd.c. Public docs (Linux kernel patch notes and vendor advisories such ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the drmclienttargetcloned function not freeing dmtmode, which could lead to a memory leak...

CVE-2025-68326

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Fix stackdepot usage Add missing stackdepotinit call when CONFIGDRMXEDEBUGGUC is enabled to fix the following call stack: BUG: kernel NULL pointer dereference, address: 0000000000000000 Workqueue: drmschedrunjobwork...

The vulnerability of the guc_submit_wedged_fini() function in the drivers/gpu/drm/xe/xe_guc_submit.c driver module allows a hacker to cause a service failure. This vulnerability is related to the Direct Rendering Infrastructure (DRI) support in the Linux kernel.

The vulnerability of the gucsubmitwedgedfini function in the drivers/gpu/drm/xe/xegucsubmit.c driver module is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability in the driver/gpu/drm/amd/display/dc/dml2/dml2_core/dml2_core_shared_types.h file of the Linux operating system’s kernel, which allows a hacker to trigger a service failure. This vulnerability relates to the driver that supports AMD graphics cards’ Direct Rendering Infrastructure (DRI) in Linux.

The vulnerability in the drivers/gpu/drm/amd/display/dc/dml2/dml2core/dml2coresharedtypes.h file relates to the driver that supports AMD’s Linux operating system graphics cards’ Direct Rendering Infrastructure DRI. This vulnerability stems from allowing an operation to go beyond the buffer...

The vulnerability of the dcn201_acquire_free_pipe_for_layer() function in the drivers/gpu/drm/amd/display/dc/dcn201/dcn201_resource.c driver module allows a hacker to trigger a service failure. This vulnerability is related to the Direct Rendering Infrastructure (DRI) support for AMD graphics cards in Linux operating systems.

The vulnerability of the dcn201acquirefreepipeforlayer function in the drivers/gpu/drm/amd/display/dc/dcn201/dcn201resource.c driver module relates to the pointer manipulation in the Direct Rendering Infrastructure DRI support for AMD graphics cards in Linux operating systems. Exploiting this...

PT-2026-38963

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/panthor component regarding dma-fence safe access rules. Specifically, the function drm sched fence get timeline name may race with group free queue, potential...

UBUNTU-CVE-2025-68314

In the Linux kernel, the following vulnerability has been resolved: drm/msm: make sure lastfence is always updated Update lastfence in the vm-bind path instead of kernel managed path. lastfence is used to wait for work to finish in vmbind contexts but not used for kernel managed contexts. This...

CVE-2025-68314 drm/msm: make sure last_fence is always updated

In the Linux kernel, the following vulnerability has been resolved: drm/msm: make sure lastfence is always updated Update lastfence in the vm-bind path instead of kernel managed path. lastfence is used to wait for work to finish in vmbind contexts but not used for kernel managed contexts. This...

CVE-2025-68314 drm/msm: make sure last_fence is always updated

In the Linux kernel, the following vulnerability has been resolved: drm/msm: make sure lastfence is always updated Update lastfence in the vm-bind path instead of kernel managed path. lastfence is used to wait for work to finish in vmbind contexts but not used for kernel managed contexts. This...

EUVD-2025-203689

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Synchronize Dead CT worker with unbind Cancel and wait for any Dead CT worker to complete before continuing with device unbinding. Else the worker will end up using resources freed by the undind operation. cherry pick...

CVE-2025-40360

In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Do not dereference NULL pointer in plane reset The plane state in drmgemresetshadowplane can be NULL. Do not deref that pointer, but forward NULL to the other plane-reset helpers. Clears plane-state to NULL. v2: - fix...

Vulnerability of the hx83102_get_modes() function in the drivers/gpu/drm/panel/panel-himax-hx83102.c module – A driver for supporting Direct Rendering Infrastructure (DRI) in Linux kernels, which allows an attacker to cause a service failure

Vulnerability of the hx83102getmodes function in the drivers/gpu/drm/panel/panel-himax-hx83102.c module – The Linux kernel’s DRI driver is vulnerable due to a pointer manipulation issue. Exploiting this vulnerability could allow an attacker to cause a system failure...