Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow. The buffer ‘afmtstatus’, which is sized 6, could overflow, as the index ‘afmtidx’ is checked after access...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1, and Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Check that bova-bo is not NULL before using it. The call to radeonvmclearfreed may clear bova-bo, so we must check this before dereferencing it...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fixed encoder-possibleclones. The encoder itself should now be included in its possibleclones bitmask. Previously, it was not verified whether drivers were correctly populating possibleclones. This has been changed in...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Check the return value of allocworkqueue in radeoncrtcinit. Check the return value of allocworkqueue in radeoncrtcinit to avoid null-ptr-deref...

CVE-2026-74416

A flaw was found in the Linux kernel's drm/radeon component. When a Graphics Processing Unit GPU reset operation fails to acquire a necessary lock, a memory buffer is not properly released. Repeated occurrences of this issue can lead to a gradual depletion of kernel memory. This memory exhaustion...

Linux Distros Unpatched Vulnerability : CVE-2026-74416

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/radeon: fix memory leak in radeonringrestore on lock failure radeonringrestore takes ownership of the data buffer allocated by radeonringbackup. The caller...

CVE-2026-74417 drm/radeon: fix integer overflow in radeon_align_pitch()

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix integer overflow in radeonalignpitch radeonalignpitch has the same kind of overflow issue as the old amdgpu helper: both the alignment round-up add and the final 'aligned cpp' calculation can overflow signed int. ...

CVE-2026-74416 drm/radeon: fix memory leak in radeon_ring_restore() on lock failure

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix memory leak in radeonringrestore on lock failure radeonringrestore takes ownership of the data buffer allocated by radeonringbackup. The caller radeongpureset only frees it in the non-restore branch; in the restor...

CVE-2026-74416 drm/radeon: fix memory leak in radeon_ring_restore() on lock failure

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix memory leak in radeonringrestore on lock failure radeonringrestore takes ownership of the data buffer allocated by radeonringbackup. The caller radeongpureset only frees it in the non-restore branch; in the restor...

CVE-2026-74416

CVE-2026-74416 affects the Linux kernel DRM/Radeon stack. The vulnerability is a memory-leak in radeon_ring_restore() on lock failure: radeon_ring_restore() takes ownership of the buffer allocated by radeon_ring_backup(), but when radeon_ring_lock() fails it returns early and does not kvfree(data...

drm/radeon: delete radeon_fence_process in is_signaled, no deadlock

...

Linux Distros Unpatched Vulnerability : CVE-2025-68170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/radeon: Do not kfree devres managed rdev Since the allocation of the drivers main structure was changed to devmdrmdevalloc rdev is managed by devres and we...

CLSA-2025-1763734783 kernel: Fix of 64 CVEs

media: bttv: fix use after free error due to btv-timeout timer CVE-2023-52847 - firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails CVE-2022-50087 - wifi: mwifiex: Fix OOB and integer underflow when rx packets CVE-2023-53226 - vsock: Fix transport TOCTOU CVE-2025-38461 - ALSA:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990518)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990518 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow Buffer 'afmtstatus' of size 6 could overflow, since index...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989220)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989220 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow Buffer 'afmtstatus' of size 6 could overflow, since index...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990115)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990115 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow Buffer 'afmtstatus' of size 6 could overflow, since index...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987380 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: add a force flush to delay work when radeon Although radeon card fence and wait for g...

EUVD-2022-55449

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-53309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/radeon: Fix integer overflow in radeoncsparserinit The type of size is unsigned, if size is 0x40000000, there will be an integer overflow, size will be zero...

SUSE CVE-2023-53309

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix integer overflow in radeoncsparserinit The type of size is unsigned, if size is 0x40000000, there will be an integer overflow, size will be zero after size = sizeofuint32t, will cause uninitialized memory to be...