ROS-20260515-73-0021

A vulnerability in the PowerVR GPU driver of Google Chrome and Microsoft Edge browsers is related to writing outside of buffer boundaries. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service using a specially crafted HTML page...

CVE-2026-43444

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unreserve bo if queue update failed Error handling path should unreserve bo then return failed. cherry picked from commit c24afed7de9ecce341825d8ab55a43a254348b33...

CVE-2026-43195

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate user queue size constraints Add validation to ensure user queue sizes meet hardware requirements: - Size must be a power of two for efficient ring buffer wrapping - Size must be at least AMDGPUGPUPAGESIZE to...

CVE-2026-31566 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix fence put before wait in amdgpuamdkfdsubmitib amdgpuamdkfdsubmitib submits a GPU job and gets a fence from amdgpuibschedule. This fence is used to wait for job completion. Currently, the code drops the fence...

The vulnerability of the msm_parse_deps() function in the drivers/gpu/drm/msm/msm_gem_submit.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the msmparsedeps function in the drivers/gpu/drm/msm/msmgemsubmit.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to improper handling of error situations. Exploiting this vulnerability may allow an attacker to cause a servic...

Linux Distros Unpatched Vulnerability : CVE-2026-23469

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/imagination: Synchronize interrupts before suspending the GPU The runtime PM suspend callback doesn't know whether the IRQ handler is in progress on a...

The vulnerability of the amdgpu_cs_submit() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c driver of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the amdgpucssubmit function in the drivers/gpu/drm/amd/amdgpu/amdgpucs.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the amdgpu_vram_mgr_new() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c driver module allows a hacker to cause a service failure in AMD GPU-based Linux operating system DRI (Direct Rendering Infrastructure) kernels.

The vulnerability of the amdgpuvrammgrnew function in the drivers/gpu/drm/amd/amdgpu/amdgpuvrammgr.c driver module related to AMD GPU cores in Linux operating systems is associated with synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to caus...

Linux Distros Unpatched Vulnerability : CVE-2026-23338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings Userspace can either deliberately pass in the too small numfences, or the required...

The vulnerability of the amdgpu_userq_walk_and Drop_fence_drv() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c driver for AMD GPU cores in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpuuserqwalkand Dropfencedrv function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserqfence.c driver for AMD GPU cores in Linux operating systems is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow ...

The vulnerability of the mdp5_pipe_assign() function in the drivers/gpu/drm/msm/disp/mdp5/mdp5_pipe.c file of the DRI support driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mdp5pipeassign function in the drivers/gpu/drm/msm/disp/mdp5/mdp5pipe.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernels, is related to incorrect resource initialization. Exploiting this vulnerability can allow an attacker to cause system...

The vulnerability of the svm_range_vram_node_new() function in the drivers/gpu/drm/amd/amdkfd/kfd_svm.c driver module allows a hacker to trigger a service failure. This vulnerability targets AMD GPU-based Linux operating system graphics cards with Direct Rendering Infrastructure (DRI) support.

The vulnerability of the svmrangevramnodenew function in the drivers/gpu/drm/amd/amdkfd/kfdsvm.c driver for supporting the Direct Rendering Infrastructure DRI of AMD graphics cards in Linux operating systems is related to improper initialization. Exploiting this vulnerability can allow an attacke...

The vulnerability of the msm_ioctl_gem_submit() function in the drivers/gpu/drm/msm/msm_gem_submit.c file of the DRI support driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the msmioctlgemsubmit function in the drivers/gpu/drm/msm/msmgemsubmit.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker...

The vulnerability of the drm_sched_job_add_resv_dependencies() function in the drivers/gpu/drm/scheduler/sched_main.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the drmschedjobaddresvdependencies function in the drivers/gpu/drm/scheduler/schedmain.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the reallocation of previously released memory. Exploiting this vulnerability could allo...

CVE-2025-33218

CVE-2025-33218 affects the NVIDIA GPU Display Driver for Windows, in the kernel-mode nvlddmkm.sys, where an integer overflow could enable a local attacker to achieve code execution, privilege escalation, data tampering, DoS, or information disclosure. Public advisories from NVIDIA enumerate affec...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001543)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001543 advisory. A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allow...

CVE-2025-58409

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kern...

CVE-2025-58409

Software running as a non-privileged user can perform improper GPU system calls to subvert hardware and write to arbitrary physical memory pages . This vulnerability allows an attacker to corrupt data pages not allocated by the GPU driver, including memory used by the kernel and drivers running o...

ROS-20260113-7312

A vulnerability in the navi10issupportfinegraineddpm function in the drivers/gpu/drm/amd/pm/swsmu/smu11/navi10ppt.c module of the amdpgu driver of the Linux kernel is related to incorrect index calculation. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integri...

ROS-20260113-7360

A vulnerability in the drivers/gpu/drm/amd/display component of the Linux operating system kernel is related to synchronization errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...