CVE-2025-38449 drm/gem: Acquire references on GEM handles for framebuffers

In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released while the GEM buffer object is attached to a DRM framebuffer. This leads to the release of the dma-buf backing the buffer object, if any. 1...

PT-2025-34434

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A revert was implemented to address an issue where the dma buf field in the drm gem object structure became unstable during the object instance's lifetime. Specifically, the field coul...

PT-2025-34435

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel related to a reversion of a previous commit f83a9b8c7fd0557b0c50784bfdc1bbe9140c9bf8 concerning the handling of dma buf within drm gem object. The dma...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netsched: Flush gsoskb list too during -change CVE-2025-37992 In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: fix race condition in unaccepted memory handling CVE-2025-38008 In th...

CVE-2022-50142

In the Linux kernel, the following vulnerability has been resolved: intelth: msu: Fix vmalloced buffers After commit f5ff79fddf0e "dma-mapping: remove CONFIGDMAREMAP" there's a chance of DMA buffer getting allocated via vmalloc, which messes up the mmapping code: RIP: mscmmapfault intelthmsu Call...

CVE-2022-50142

CVE-2022-50142 : In the Linux kernel, the intel_th: msu component was fixed to account for DMA buffers that may be allocated via vmalloc() after the patch set removing CONFIG_DMA_REMAP, which could disrupt the mmapping code during faults (msc_mmap_fault). The described issue arises from a possibl...

CVE-2022-50142 intel_th: msu: Fix vmalloced buffers

In the Linux kernel, the following vulnerability has been resolved: intelth: msu: Fix vmalloced buffers After commit f5ff79fddf0e "dma-mapping: remove CONFIGDMAREMAP" there's a chance of DMA buffer getting allocated via vmalloc, which messes up the mmapping code: RIP: mscmmapfault intelthmsu Call...

PT-2025-26068 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the intel th: msu component. The issue arose after a commit that removed CONFIG DMA REMAP, which led to a chance ...

CVE-2024-46974

Software installed and run as a non-privileged user may conduct improper read/write operations on imported/exported DMA buffers...

CVE-2023-20717

In vcu, there is a possible leak of dma buffer due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07645185; Issue ID: ALPS07645185...

CVE-2020-11239

Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned up properly in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...

CVE-2019-14079

Access to the uninitialized variable when the driver tries to unmap the dma buffer of a request which was never mapped in the first place leading to kernel failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables i...

PT-2025-27682

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A null pointer dereference issue has been identified in the Linux kernel, related to the dma-buf feature. The problem arises because smp store mb inserts a memory barrier after the...

UBUNTU-CVE-2023-53084

In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Remove another errant put in error path drmgemshmemmmap doesn't own reference in error code path, resulting in the dma-buf shmem GEM object getting prematurely freed leading to a later use-after-free...

CVE-2025-37762 drm/virtio: Fix missed dmabuf unpinning in error path of prepare_fb()

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix missed dmabuf unpinning in error path of preparefb Correct error handling in preparefb to fix leaking resources when error happens...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the preparefb error path in drm/virtio not being unfixed by dmabuf...

The vulnerability of the dma_buf_run_device() function in the drivers/gpu/drm/xe/tests/xe_dma_buf.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dmabufrundevice function in the drivers/gpu/drm/xe/tests/xedmabuf.c file of the Linux kernel is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2024-56712

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udmabuf: fix memory leak on last exportudmabuf error path In exportudmabuf, if dmabuffd fails because the FD table is full, a dmabuf owning the udmabuf has...

SUSE CVE-2022-49625

In the Linux kernel, the following vulnerability has been resolved: sfc: fix kernel panic when creating VF When creating VFs a kernel panic can happen when calling to efxef10tryupdatenicstatsvf. When releasing a DMA coherent buffer, sometimes, I don't know in what specific circumstances, it has t...

DEBIAN-CVE-2022-49625

In the Linux kernel, the following vulnerability has been resolved: sfc: fix kernel panic when creating VF When creating VFs a kernel panic can happen when calling to efxef10tryupdatenicstatsvf. When releasing a DMA coherent buffer, sometimes, I don't know in what specific circumstances, it has t...