CVE-2024-57918

The CVE-2024-57918 fix targets the Linux kernel’s DRM/AMD display (DC) driver. Root cause: a surface-definition mismatch between MAX_SURFACES and MAX_SURFACE_NUM caused a page fault when updating surfaces (affecting Cosmic users with two overlay planes after cursor overlay introduction). The patc...

CVE-2024-57918

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix page fault due to max surface definition mismatch DC driver is using two different values to define the maximum number of surfaces: MAXSURFACES and MAXSURFACENUM. Consolidate MAXSURFACES as the unique...

SUSE CVE-2024-0149

NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an attacker unauthorized access to files. A successful exploit of this vulnerability might lead to limited information disclosure...

PT-2025-1571

Name of the Vulnerable Software and Affected Versions NVIDIA GPU display driver for Windows and Linux versions are affected, but specific versions are not provided. Description The issue is related to referencing memory after it has been freed, which can lead to denial of service or data tamperin...

The vulnerability of the `dc_state_create_copy()` function in the `drivers/gpu/drm/amd/display/dc/core/dc_state.c` file of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dcstatecreatecopy function in the drivers/gpu/drm/amd/display/dc/core/dcstate.c file of the Linux kernel is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

SUSE CVE-2024-56775

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix handling of plane refcount Why The mechanism to backup and restore plane states doesn't maintain refcount, which can cause issues if the refcount of the plane changes in between backup and restore operations,...

DEBIAN-CVE-2024-56784

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adding array index check to prevent memory corruption Why & How Array indices out of bound caused memory corruption. Adding checks to ensure that array index stays in bound...

UBUNTU-CVE-2024-56778

In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers in stihqvdpatomiccheck The return value of drmatomicgetcrtcstate needs to be checked. To avoid use of error pointer 'crtcstate' in case of the failure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from the AMD display driver failing to properly maintain the reference count of the plane when backing up an...

Linux kernel 代码问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from the STI DRM driver not checking the return value of drmatomicgetcrtcstate in the stihqvdpatomiccheck...

PT-2025-36299

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue exists in the AMD display driver's DC module cleanup function dc destruct. When display control context construction fails, a pointer remains NULL. Durin...

CVE-2024-53201

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipectx-planestate in dcn20programpipe This commit addresses a null pointer dereference issue in dcn20programpipe. Previously, commit 8e4ed3cf1642 "drm/amd/display: Add null check for...

SUSE CVE-2024-53200

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipectx-planestate in hwsssetupdpp This commit addresses a null pointer dereference issue in hwsssetupdpp. The issue could occur when pipectx-planestate is null. The fix adds a check to ensure...

SUSE CVE-2024-53201

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipectx-planestate in dcn20programpipe This commit addresses a null pointer dereference issue in dcn20programpipe. Previously, commit 8e4ed3cf1642 "drm/amd/display: Add null check for...

CVE-2024-56608 drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds access in 'dcn21linkencodercreate' An issue was identified in the dcn21linkencodercreate function where an out-of-bounds access could occur when the hpdsource index was used to reference the...

CVE-2024-56608

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds access in 'dcn21linkencodercreate' An issue was identified in the dcn21linkencodercreate function where an out-of-bounds access could occur when the hpdsource index was used to reference the...

DEBIAN-CVE-2024-56542

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a memleak issue when driver is removed Running "modprobe amdgpu" the second time followed by a modprobe -r amdgpu causes a call trace like: 845.212163 Memory manager not clean during takedown. 845.212170...

AZL-55127 CVE-2024-53200 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipectx-planestate in hwsssetupdpp This commit addresses a null pointer dereference issue in hwsssetupdpp. The issue could occur when pipectx-planestate is null. The fix adds a check to ensure...

DEBIAN-CVE-2024-53200

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipectx-planestate in hwsssetupdpp This commit addresses a null pointer dereference issue in hwsssetupdpp. The issue could occur when pipectx-planestate is null. The fix adds a check to ensure...

UBUNTU-CVE-2024-56537

In the Linux kernel, the following vulnerability has been resolved: drm: xlnx: zynqmpdisp: layer may be null while releasing layer-info can be null if we have an error on the first layer in zynqmpdispcreatelayers...