15409 matches found
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate struct dc The struct dc has grown significantly over time mostly due to the two inlined dcscratchspace copies. It now occupies nearly the 4 MiB contiguous allocation limit set by the page...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: dce100: skipping non-DP stream encoders for DP MST On DCE8-class ASICs e.g., Bonaire, the resource pool contains digital DIG stream encoders and one analog DAC encoder. When assigning a stream encoder for a secon...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/stm: ltdc: fix late dereference check In ltdccrtcsetcrcsource, the struct drmcrtc was dereferenced before the pointer check by the containerof function. This could cause a kernel panic. Fix this “match warning”:...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: anx7625: Fixed an overflow issue when reading EDID. The length of the EDID block can be longer than 256 bytes. Therefore, we should use int instead of u8 for the edidpos variable...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fixed a potential memory leak in DMUB hwinit Why When resuming, we perform DMUB hwinit, which allocates memory using dmresume-dmdmubhwinit-dcdmubsrvcreate-kzalloc. This results in a memory leak in suspend/resume...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: “Revert ‘drm/amd/display: Use HW lock mgr for PSR1’” This revertment is associated with the commit a2b5a9956269 “drm/amd/display: Use HW lock mgr for PSR1”. It may cause system hangs when connecting with the two EDP panels...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fixed the ISM dclock deadlock during suspension. Why A system hang was observed during suspension/resumption when video was playing. The amdgpudmismdisable function was called under dclock and waited for the ISM ...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid NPD when the ASIC does not support DMUB ctx-dmubsrv will be freed if the ASIC does not support DMUB, which is tested in dmdmubswinit. However, it will be freed in dmubHWLockmgrCmd if shouldusedmubLock retur...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fixed a possible underflow issue for displays with a large vblank period. Why An underflow was observed when using a display with a large vblank period and a low refresh rate. How The calculation of vblanknom was...
urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure
A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...
Linux DRM AMD Display Kernel DoS
The vulnerability of components such as DRM, AMD, and display kernels in the Linux operating system is related to insufficient checking of the type of input data provided. Exploiting this vulnerability can allow an attacker to cause service failures...
Linux DRM AMD Display Kernel DoS
The vulnerability of components such as DRM, AMD, and display kernels in the Linux operating system is related to reading data from buffers beyond their allowable limits. Exploiting this vulnerability can allow a hacker to cause service failures...
PT-2026-80982
Name of the Vulnerable Software and Affected Versions Baserow versions prior to 2.3.0 Description Baserow fails to HTML encode a user's display name when interpolating it into rich-text mention markup. The endpoint 'PATCH /api/user/account/' stores the first name value verbatim. Subsequently, the...
python-urwid security update
2.1.2-4.1 - Fix CVE-2026-9323: use cryptographically secure session identifiers in web display module - Resolves: RHEL-212564...
PT-2026-79824
A security flaw has been discovered in achorein expo-share-intent up to 8.0.0. This affects the function getDataColumn of the file ExpoShareIntentModule.kt of the component Android File Copy Routine. The manipulation of the argument display name results in path traversal. The attack requires a...
python-urwid security update
1.3.1-5 - Use secure random session identifiers in web display CVE-2026-9323 - Resolves: RHEL-212562...
SUSE CVE-2026-74732
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
AZL-97200 CVE-2026-74732 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check for tg ops in dce110setavmute Some older DCE timing generators do not implement istgenabled in their ops table. Calling it unconditionally when waiting for AV mute frames causes a NULL pointer dereference o...
