kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size

A flaw was found in the Linux kernel's AMD display driver. This vulnerability occurs when the driver processes malformed VBIOS Video Basic Input/Output System data. Specifically, unvalidated register counts in the VBIOS can lead to an out-of-bounds memory write during the driver's initialization...

kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size

A flaw was found in the Linux kernel's AMD display driver. This vulnerability occurs when the driver processes malformed VBIOS Video Basic Input/Output System data. Specifically, unvalidated register counts in the VBIOS can lead to an out-of-bounds memory write during the driver's initialization...

kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and linkindex in dcprocessdmubauxtransferasync Why&How dcprocessdmubauxtransferasync copies payload-length bytes into a 16-byte stack buffer dpaux.data16 guarded only by an ASSERT, which i...

CVE-2026-76383 Information Disclosure through Action Parameters in RSA SecurID Authentication Manager app for Splunk SOAR

In versions below 1.0.5 of the RSA SecurID Authentication Manager app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive token serial by invoking either the enable token or revoke token action, because the action's tokenserial parameter is not masked...

CVE-2026-76376 Information Disclosure through Action Parameters in AWS IAM app for Splunk SOAR

In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive AWS credentials by invoking an action that accepts the credentials parameter, because the parameter is not masked and is shown in cleartext in the user...

CVE-2026-76376

In versions below 2.1.9 of the AWS IAM app for Splunk SOAR , a user with permission to run actions can expose sensitive AWS credentials in cleartext through the user interface. The root cause is that the affected action parameter is not marked as a password , so it is not masked when displayed. T...

Malicious Package

Overview @milleree/date-display is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

K000162987: Linux kernel vulnerability CVE-2026-53313

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid NULL dereference in dcdmubsrv error paths In dcdmubsrvlogdiagnosticdata and dcdmubsrvenabledpiatrace. Both functions check: if !dcdmubsrv || !dcdmubsrv-dmub and then call...

CVE-2026-72313

A flaw was found in the Linux kernel's display rendering manager DRM framebuffer helper drm/fb-helper. This vulnerability arises from incorrect synchronization with display controllers CRTCs, where the system attempts to synchronize with an inactive controller. This can lead to display timeouts a...

MAL-2026-14126 Malicious code in @milleree/date-display (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d2c195a06ca2577f279d5ec0939d9d958086f361f147e08b200c28786f776ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve()

A flaw was found in the Linux kernel's drm/amd/display component. The dalvectorreserve function calculates memory allocation size using 32-bit arithmetic, which can lead to an integer overflow. This overflow causes a smaller memory buffer to be allocated than intended, resulting in a heap overflo...

kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size

A flaw was found in the Linux kernel's AMD display driver. This vulnerability occurs when the driver processes malformed VBIOS Video Basic Input/Output System data. Specifically, unvalidated register counts in the VBIOS can lead to an out-of-bounds memory write during the driver's initialization...

kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve()

A flaw was found in the Linux kernel's drm/amd/display component. The dalvectorreserve function calculates memory allocation size using 32-bit arithmetic, which can lead to an integer overflow. This overflow causes a smaller memory buffer to be allocated than intended, resulting in a heap overflo...

kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size

A flaw was found in the Linux kernel's AMD display driver. This vulnerability occurs when the driver processes malformed VBIOS Video Basic Input/Output System data. Specifically, unvalidated register counts in the VBIOS can lead to an out-of-bounds memory write during the driver's initialization...

kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation

A flaw was found in the Linux kernel's AMD display component. This vulnerability arises from incorrect validation of display mode changes during Display Stream Compression DSC processing. A local attacker could exploit this by initiating specific display configuration changes, which may lead to a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100774)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100774 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Clamp HDMI HDCP2 rxidlist read to buffer size Why & How During HDCP 2.x repeater...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100553)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100553 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs Why & How...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099957)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099957 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Clamp HDMI HDCP2 rxidlist read to buffer size Why & How During HDCP 2.x repeater...

SUSE CVE-2026-74449

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix divide-by-zero in calculatemcachesetting on zero viewport If a plane reaches calculatemcachesetting with a zero-area viewport, calculatemcachesetting exits early with nummcaches == 0 and mvmpgwidth/height == ...

CVE-2026-74449

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix divide-by-zero in calculatemcachesetting on zero viewport If a plane reaches calculatemcachesetting with a zero-area viewport, calculatemcachesetting exits early with nummcaches == 0 and mvmpgwidth/height == ...