PT-2026-72576

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock Since dma fence objects can be shared with other subsystems, they may be accessed from hardirq context in those drivers, and we have to take that into...

Linux Distros Unpatched Vulnerability : CVE-2026-74443

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: bound DMA command body size against suffix pointer vmwcmddma locates the DMA suffix at unsigned long &cmd-body + header-size - sizeofsuffix without...

CVE-2026-68437

A flaw was found in the Linux kernel's PowerVR DRM driver. The driver incorrectly handles paired fragment jobs, leading to an erroneous check for available space in the command buffer. This issue can cause the system to experience kernel warnings and potentially job timeouts, resulting in a Denia...

CVE-2026-68446

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmwsurfacemetadata::arraysize This field comes from userspace and should be validated against specific limits depending on which Shader Model SM is available...

CVE-2026-68437

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fit paired fragment job in the correct CCCB For geometry jobs with a paired fragment job, at the moment, the DRM scheduler's preparejob callback: - checks for internal driver dependencies for the geometry job; -...

Linux Distros Unpatched Vulnerability : CVE-2026-68430

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/gfx8: drop unecessary BUGON There's no need to crash the kernel for this case. cherry picked from commit 4d7c25208ca612b754f3bf39e9f16e725b828891...

CVE-2026-68252

A flaw was found in the drm/amdgpu/sdma7.0 component of the Linux kernel. This vulnerability could lead to a kernel crash, resulting in a Denial of Service DoS. The issue was caused by an improper use of BUGON which has been replaced with WARNON to prevent system instability...

CVE-2026-68261

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: fix error checking of pvrvmcontextlookup Since pvrvmcontextlookup returns either NULL or a pointer, then stop using ISERR for checking the return value. Using ISERR leads to the kernel oops reported below. It can...

UBUNTU-CVE-2026-68115

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx10: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit ac6f00beb658239bced4aaed9efbb04a35348d48...

Linux Distros Unpatched Vulnerability : CVE-2026-68273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: Fix context pstate override handling There are several problems in the context pstate handling code. The most serious ones are potential...

Linux Distros Unpatched Vulnerability : CVE-2026-68276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/gfx: fix cleaner shader IB buffer overflow The cleaner shader sysfs path allocates a 16-dword 64 byte IB but incorrectly fills alignmask + 1 dwords. ...

The vulnerability of the drm_compat_ioctl() function in the drivers/gpu/drm/drm_ioc32.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the drmcompatioctl function in the drivers/gpu/drm/drmioc32.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel relates to the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability in the `drivers/gpu/drm/i915/i915_perf.c` file of the Direct Rendering Infrastructure (DRI) driver of the Linux operating system allows a hacker to gain access to protected information or cause a service failure.

The vulnerability in the drivers/gpu/drm/i915/i915perf.c file of the Direct Rendering Infrastructure DRI driver of the Linux operating system is related to a data format agreement violation. Exploiting this vulnerability can allow an attacker to access protected information or cause service...

CVE-2026-63881

CVE-2026-63881 affects the Linux kernel DRM/AMDKFD debugger path. The get_queue_ids() function computed array_size as num_queues * sizeof(uint32_t), which could overflow on 32-bit size_t builds. The fix replaces this with a safe-sized approach using array_size(), causing saturation to SIZE_MAX on...

The vulnerability of the xe_oa_add_config_ioctl() function in the drivers/gpu/drm/xe/xe_oa.c module of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the xeoaaddconfigioctl function in the drivers/gpu/drm/xe/xeoa.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a...

The vulnerability of the amdgpu_device_suspend() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_device.c driver code allows a hacker to cause a service failure in AMD GPU cores supporting Direct Rendering Infrastructure (DRI) in Linux operating systems.

The vulnerability of the amdgpudevicesuspend function in the drivers/gpu/drm/amd/amdgpu/amdgpudevice.c driver, which is part of the DRI support module for AMD GPU cores in Linux operating systems, leads to a mutual locking condition. Exploiting this vulnerability can allow an attacker to cause a...

Linux Distros Unpatched Vulnerability : CVE-2026-53056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm/dpu: fix mismatch between power and frequency During DPU runtime suspend, calling devpmoppsetratedev, 0 drops the MMCX rail to MINSVS while the core clo...

CVE-2026-46263 drm/amd/display: Fix out-of-bounds stream encoder index v3

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds stream encoder index v3 engid can be negative and that streamencregs can be indexed out of bounds. engid is used directly as an index into streamencregs, which has only 5 entries. When engid is ...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the exynos-drm driver’s viidiconnectionioctl function, which directly derefreshes user-space...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/tests: helpers: Avoid a driver UAF When using drmkunithelperallocdrmdevice, the driver may be referenced by device-managed resources until the device is freed. This typically happens later than when the kunit-managed resource...