The vulnerability of the amdgpu_userq_fence_driver_process() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c source file of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the amdgpuuserqfencedriverprocess function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserqfence.c source code of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to the occurrence of mutual locking. Exploiting this...

CVE-2026-16280

The GPU DDK is vulnerable to an integer overflow within the _PMRLogicalOffsetToPhysicalOffset function when calculating physical offsets for sparse PMRs . For PMRs exceeding 4 GB , this overflow causes 32-bit truncation of address computations, leading to incorrect GPU MMU mappings . A non-privil...

CVE-2026-49743: Use After Free

Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs. During workload submission involving a fence exported by the GPU driver, the reference count of the underlyin...

SUSE CVE-2017-6264

An elevation of privilege vulnerability exists in the NVIDIA GPU driver gm20bclkthrotsetcdevstate, where an out of bound memory read is used as a function pointer could lead to code execution in the kernel.This issue is rated as high because it could allow a local malicious application to execute...

The vulnerability of the `psm_init_power_state_table()` function in the `drivers/gpu/drm/amd/pm/powerplay/hwmgr/pp_psm.c` driver, a component of the Direct Rendering Infrastructure (DRI) graphics card driver for AMD-based Linux operating systems. This vulnerability allows an attacker to cause a system failure.

The vulnerability of the psminitpowerstatetable function in the drivers/gpu/drm/amd/pm/powerplay/hwmgr/pppsm.c driver for AMD Direct Rendering Infrastructure DRI graphics cards in Linux operating systems is related to improper memory release memory leak. Exploiting this vulnerability could allow ...

CVE-2026-64154

A flaw was found in the Linux kernel's Adreno graphics processing unit GPU driver. This vulnerability occurs in the a6xxgpuinit function, where a device node reference is not properly released under certain error conditions. This oversight can lead to a gradual accumulation of unreleased resource...

The vulnerabilities of the functions msm_iommu_pagetable_prealloc_allocate() and msm_iommu_pagetable_prealloc_cleanup() in the driver module drivers/gpu/drm/msm/msm_iommu.c of the Direct Rendering Infrastructure (DRI) kernel driver of the Linux operating system allow a attacker to cause a service failure.

The vulnerabilities of the functions msmiommupagetablepreallocallocate and msmiommupagetableprealloccleanup in the driver module drivers/gpu/drm/msm/msmiommu.c of the Direct Rendering Infrastructure DRI kernel of the Linux operating system are related to the passing of pointers. Exploiting these...

CVE-2026-53374

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: zero-initialize GART table on allocation GART TLB is flushed after unmapping but not after mapping. Since amdgpubocreatekernel does not zero-initialize the buffer, when a single PTE is written the TLB may speculativel...

CVE-2026-53374 drm/amdgpu: zero-initialize GART table on allocation

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: zero-initialize GART table on allocation GART TLB is flushed after unmapping but not after mapping. Since amdgpubocreatekernel does not zero-initialize the buffer, when a single PTE is written the TLB may speculativel...

The vulnerability of the amdgpupciSlotReset() function in the driver/gpu/drm/amd/amdgpu/amdgpu_device.c file of the Linux operating system’s graphics driver module allows a malicious actor to cause a service failure.

The vulnerability of the amdgpupciSlotReset function in the drivers/gpu/drm/amd/amdgpu/amdgpudevice.c source code of the DRI support module for AMD GPU cores in Linux operating systems is related to the execution of a loop without sufficient restrictions on its execution count. Exploiting this...

CVE-2026-45203 GPU DDK - rgxfw_hwperf_ufo() re-reads psCmdHeader->ui32CmdSize after initial check, TOCTOU

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory write outside the permitted range of memory for the host kernel. A TOCTOU bug existed where a malicious driver could modify values in memory after firmware validation but befo...

CVE-2026-7639 GPU DDK - Page UAF read in PMMETA_PROTECT heap memory

Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facilitating unprivileged memory access from a shader code. Triggering failure path in the MMU mapping logic by a malicious code could lead to incomplete...

The vulnerability of the msm_ioctl_gem_info_set_metadata() function in the drivers/gpu/drm/msm/msm_drv.c file of the Direct Rendering Infrastructure (DRI) driver module in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the msmioctlgeminfosetmetadata function in the drivers/gpu/drm/msm/msmdrv.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failur...

The vulnerabilities of the functions dp_display_get_next_bridge() (drivers/gpu/drm/msm/dp/dp_display.c) and dp_parser_find_next_bridge() (drivers/gpu/drm/msm/dp/dp_parser.c) in the Linux kernel’s Direct Rendering Infrastructure (DRI) driver software allow a malicious actor to cause service interruptions.

The vulnerability of the functions dpdisplaygetnextbridge drivers/gpu/drm/msm/dp/dpdisplay.c and dpparserfindnextbridge drivers/gpu/drm/msm/dp/dpparser.c in the Linux kernel’s Direct Rendering Infrastructure DRI driver framework is related to the distribution of resources without any restrictions...

CVE-2026-34193 GPU DDK - Arbitrary write via UFO updates due insufficient pointer validation in rgxfw_to_ptr()

Kernel software installed and running inside a Guest/Host VM may post improper commands to the GPU Firmware to trigger a write of data outside the intended GPU memory. A logic error in the address translation allowed a compromised Host Kernel to perform arbitrary writes to firmware memory...

Exploit for Missing Release of Memory after Effective Lifetime in Arm 5Th_Gen_Gpu_Architecture_Kernel_Driver

CVE-2023-26083 – Mali GPU Kernel Address Leak via Timeline Str...

Linux Distros Unpatched Vulnerability : CVE-2026-24198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Linux contains a vulnerability where an advanced attacker could use a race condition to leak sensitive memory, which might cause...

CVE-2026-24198

NVIDIA GPU Display Driver for Linux contains a vulnerability where an advanced attacker could use a race condition to leak sensitive memory, which might cause limited exposure of sensitive information to an unauthorized actor. A successful exploit of this vulnerability might lead to denial of...

CVE-2026-45853

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Use kvfree instead of kfree in amdgpugmcgetnpsmemranges amdgpudiscoverygetnpsinfo internally allocates memory for ranges using kvcalloc, which may use vmalloc for large allocation. Using kfree to release vmalloc memor...

NVIDIA Linux GPU Display Driver (May 2026)

The NVIDIA GPU display driver software on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A vulnerability exists where an attacker could cause a use-after-free, potentially leading to denial of service, escalation of privileges,...