Linux DRI Kernel Heap Buffer Overflow DoS

The vulnerability of the requireuniformaddressuniform function in the drivers/gpu/drm/vc4/vc4validateshaders.c driver for the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow a remot...

SUSE CVE-2026-74381

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Allow entries in BO caches to be freed When a buffer object is pinned via host1xbopin with a cache, the resulting mapping is kept in the cache so it can be reused on subsequent pins. Each mapping held a reference to...

amdgpu_cs parser_bos() DoS

The vulnerability of the amdgpucs parserbos function in the drivers/gpu/drm/amd/amdgpu/amdgpucs.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this...

CVE-2026-80618

A flaw was found in the kernel's AMD GPU driver drm/amdkfd. This vulnerability occurs when the driver attempts to unpin a memory buffer object BO twice during memory deallocation. A local attacker could exploit this double-unpin operation, leading to a memory management error. This issue can caus...

Direct Rendering Infrastructure AMD Kernel Linux Buffer Overflow

The vulnerability of the pqmupdatequeueproperties function in the drivers/gpu/drm/amd/amdkfd/kfdprocessqueuemanager.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems leads to unmanageable resource consumption. Exploiting this vulnerability...

amdgpu_userq_wait_ioctl Heap Buffer Overflow DoS

The vulnerability of the amdgpuuserqwaitioctl function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserqfence.c driver of the Direct Rendering Infrastructure DRI for AMD GPU cores in the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow ...

SUSE-SU-2026:23362-1 Security update for qemu

This update for qemu fixes the following issue: - CVE-2026-3886: lack of proper validation of user-supplied data in the virtio-gpu driver can lead to local privilege escalation via an integer overflow bsc1268061. Other updates and bugfixes: - Service: switch back to tarscm. - Bug fixes:...

ROS-20260827-73-0020

The vulnerability of the intelgetcrtcnewencoder function in the drivers/gpu/drm/i915/display/inteldisplay.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system...

Linux kernel i915_fence_release Heap Buffer Overflow DoS

The vulnerability of the i915fencerelease function in the Linux kernel’s drivers/gpu/drm/i915/i915request.c module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Linux DRI Driver Heap Buffer Overflow DoS

The vulnerability of the xenvminit function in the drivers/gpu/drm/xe/xenvm.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to...

Direct Rendering Infrastructure Heap Buffer Overflow DoS

The vulnerability of the pvrpowerreset function in the drivers/gpu/drm/imagination/pvrpower.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: GPU: host1x – Fixed the return value check for iommumapsgtable The commit “iommu: returning the full error code from iommumapsgatomic” changed iommumapsgtable to return an ssizet value in error cases, instead of a sizet value ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: GPU: host1x – Allow entries in BO caches to be freed When a buffer object is pinned using host1xbopin, along with a cache, the resulting mapping is kept in the cache so it can be reused in subsequent pinnings. Each mapping holds ...

EUVD-2026-64575

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues BIN, RENDER, TFU and CSD but has only a single, global reset. A timeout on any one queue therefore has to stop, reset and restart t...

CVE-2026-74454

A flaw was found in the Linux kernel's drm/vc4 component. An out-of-bounds write vulnerability exists where the graphics processing unit GPU driver incorrectly calculates memory allocation sizes. This allows the GPU to write data beyond its allocated memory region during out-of-memory events. Thi...

CVE-2026-45202

Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free even...

EUVD-2026-63809

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 page size could lead to 4K pages being treated a...

PT-2026-79295

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 page size could lead to 4K pages being treated a...

CVE-2026-74380

A flaw was found in the Linux kernel's host1x GPU driver. An incorrect return value check in the iommumapsgtable function, coupled with an improper integer assignment in pinjob, could lead to negative value overflows. This vulnerability may result in data integrity issues or system instability...

Linux Distros Unpatched Vulnerability : CVE-2026-74353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: always resumeall after suspendall Need to restore any good queues even if the...