132 matches found
PT-2025-48865
Уязвимость функции drm gem for each gpuvm bo ядра операционной системы Linux связана с неправильной инициализацией ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
PT-2025-46627
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc4-assorted-fix-00005-g0e9bb53a2282-dirty Description The Linux kernel contains an issue where the drm gem for each gpuvm bo call from lookup vma accesses drm gem obj.gpuva.list, which is not initialized...
DEBIAN-CVE-2025-38449
In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released while the GEM buffer object is attached to a DRM framebuffer. This leads to the release of the dma-buf backing the buffer object, if any. 1...
CVE-2025-38449: Use After Free
In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released while the GEM buffer object is attached to a DRM framebuffer. This leads to the release of the dma-buf backing the buffer object, if any. 1...
PT-2025-34434
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A revert was implemented to address an issue where the dma buf field in the drm gem object structure became unstable during the object instance's lifetime. Specifically, the field coul...
CVE-2023-53084
In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Remove another errant put in error path drmgemshmemmmap doesn't own reference in error code path, resulting in the dma-buf shmem GEM object getting prematurely freed leading to a later use-after-free...
PT-2025-8401
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the mdp5 crtc cursor set function. The drm gem object lookup function calls drm gem object get internally,...
Linux kernel drm/shmem-helper DoS
The vulnerability of the drm/shmem-helpper component in the Linux operating system’s kernel is related to a memory reallocation error in the drmgemshmemmmap function. Exploiting this vulnerability can allow an attacker to cause a service failure...
kernel: drm/amdgpu: avoid using null object of framebuffer
A flaw was found in the Linux kernel's AMD GPU amdgpu driver. The driver directly accesses display framebuffer objects without verifying whether the object exists. A local user could exploit this vulnerability to trigger a null pointer dereference, leading to a kernel crash and a Denial of Servic...
kernel: drm/amdgpu: avoid using null object of framebuffer
A flaw was found in the Linux kernel's AMD GPU amdgpu driver. The driver directly accesses display framebuffer objects without verifying whether the object exists. A local user could exploit this vulnerability to trigger a null pointer dereference, leading to a kernel crash and a Denial of Servic...
SUSE CVE-2024-46694
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state-fb-obj0 directly, get object from framebuffer by calling drmgemfbgetobj and return error code when object is null to avoid using null object of...
UBUNTU-CVE-2024-43867
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: prime: fix refcount underflow Calling nouveauboref on a nouveaubo without initializing it and hence the backing ttmbo leads to a refcount underflow. Instead of calling nouveauboref in the unwind path of...
SUSE CVE-2024-41093
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid using null object of framebuffer Instead of using state-fb-obj0 directly, get object from framebuffer by calling drmgemfbgetobj and return error code when object is null to avoid using null object of framebuffer...
AZL-47519 CVE-2024-41093 affecting package kernel for versions less than 6.6.43.1-7
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid using null object of framebuffer Instead of using state-fb-obj0 directly, get object from framebuffer by calling drmgemfbgetobj and return error code when object is null to avoid using null object of framebuffer...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the direct use of state-fb-obj0, instead of obtaining an object via the drmgemfbgetobj function, and returni...
PT-2024-28512
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A lack of check for copy-on-write COW mapping in drm gem shmem mmap allows users to call mmap with PROT WRITE and MAP PRIVATE flag, causing a kernel panic due to BUG ON in vmf insert pfn...
SUSE CVE-2022-48633
In the Linux kernel, the following vulnerability has been resolved: drm/gma500: Fix WARNONlock-magic != lock error psbgemunpin calls dmaresvlock but the underlying wwmutex gets destroyed by drmgemobjectrelease move the drmgemobjectrelease call in psbgemfreeobject to after the unpin to fix the bel...
DEBIAN-CVE-2022-48662
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Really move i915gemcontext.link under ref protection i915perf assumes that it can use the i915gemcontext reference to protect its i915-gem.contexts.list iteration. However, this requires that we do not remove the...
DEBIAN-CVE-2021-47200
In the Linux kernel, the following vulnerability has been resolved: drm/prime: Fix use after free in mmap with drmgemttmmmap drmgemttmmmap drops a reference to the gem object on success. If the gem object's refcount == 1 on entry to drmgemprimemmap, that drop will free the gem object, and the...
PT-2024-6497
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a resource management error in the drm/mediatek component of the Linux kernel. If a userspace application attempts to allocate a 0x0 GBM buffer, the kernel will...