CVE-2026-74353

The CVE-2026-74353 entry concerns the Linux kernel component drm/amdkfd. The issue arises from an incorrect flow around suspend_all/resume_all: the fix ensures that queues are restored even if suspend_all fails and that remove_queue is always run because it can trigger a GPU reset if removing the...

CVE-2026-74353 drm/amdkfd: always resume_all after suspend_all

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: always resumeall after suspendall Need to restore any good queues even if the suspendall failed for some. Always run removequeue as that will schedule a GPU reset is removing the queue fails. v2: move resumeall after...

EUVD-2026-59500

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: always resumeall after suspendall Need to restore any good queues even if the suspendall failed for some. Always run removequeue as that will schedule a GPU reset is removing the queue fails. v2: move resumeall after...

CVE-2026-72388

The CVE-2026-72388 entry concerns the Linux kernel DRM/Panthor driver. Root cause: when acquiring the dma_fence lock, drivers can be reached from hardirq context, requiring the IRQ-safe variant and a guard-model switch. Affected component is drm/panthor in the kernel’s fence handling; fix involve...

EUVD-2026-59285

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced A group ref is tied to the pending tileroomwork, so we need to release it if the cancel was effective...

CVE-2026-72358 drm/xe/pt: prevent invalid cursor access for purged BOs

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: prevent invalid cursor access for purged BOs During a page table walk for binding, xeptstagebind explicitly skips initializing the xerescursor for purged BOs, treating them similarly to NULL VMAs by only setting the...

EUVD-2026-59257

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: prevent invalid cursor access for purged BOs During a page table walk for binding, xeptstagebind explicitly skips initializing the xerescursor for purged BOs, treating them similarly to NULL VMAs by only setting the...

CVE-2026-72245

CVE-2026-72245 relates to the Linux kernel GPU host1x driver, where a reference leak could occur in host1x_device_parse_dt() after device_initialize(). The embedded struct device was freed directly via kfree(device) in the error path, bypassing normal device lifetime handling and leaking a refere...

CVE-2026-72244 gpu/buddy: bail out of try_harder when alignment cannot be honoured

In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of tryharder when alignment cannot be honoured The tryharder contiguous fallback could return a range whose start offset did not match the caller's minblocksize. When a candidate's start is misaligned, realign...

CVE-2026-72244

CVE-2026-72244 concerns the Linux kernel gpu/buddy allocator. The bug in try_harder contiguous fallback could return a range whose start offset didn’t match the caller’s min_block_size. The fix realigns misaligned candidates by freeing the misaligned run and reallocating exactly @size at the next...

CVE-2026-72244 gpu/buddy: bail out of try_harder when alignment cannot be honoured

In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of tryharder when alignment cannot be honoured The tryharder contiguous fallback could return a range whose start offset did not match the caller's minblocksize. When a candidate's start is misaligned, realign...

EUVD-2026-59143

In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of tryharder when alignment cannot be honoured The tryharder contiguous fallback could return a range whose start offset did not match the caller's minblocksize. When a candidate's start is misaligned, realign...

PT-2026-72852

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix memory leak in radeon ring restore on lock failure radeon ring restore takes ownership of the data buffer allocated by radeon ring backup. The caller radeon gpu reset only frees it in the non-restore branch; in th...

PT-2026-72432

In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of try harder when alignment cannot be honoured The try harder contiguous fallback could return a range whose start offset did not match the caller's min block size. When a candidate's start is misaligned,...

PT-2026-72793

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu coredump ring dump The ring content dump in amdgpu coredump uses two separate loops over adev-rings: the first counts rings with unsignalled fences to size the allocation, and th...

Linux Distros Unpatched Vulnerability : CVE-2026-74454

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size vc4overflowmemwork points BPOA at a 512KB slot inside the 16MB binner BO, but writes t...

PT-2026-72284

In the Linux kernel, the following vulnerability has been resolved: dma-fence: Make dma fence dedup array robust against 0-count input dma fence dedup array returns 1 when called with num fences == 0: the for-loop body never executes, j stays at 0, and the final return ++j yields 1. This...

PT-2026-72789

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: always resume all after suspend all Need to restore any good queues even if the suspend all failed for some. Always run remove queue as that will schedule a GPU reset is removing the queue fails. v2: move resume all...

Linux Distros Unpatched Vulnerability : CVE-2026-74453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vc4: Zero the tile state data array before each BIN job The binner BO is a single 16MB buffer split into 512KB slots that are handed out to jobs at submissi...

Linux Distros Unpatched Vulnerability : CVE-2026-74447

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: fix uint32t overflow in EOP ring buffer size alignment eopringbuffersize in struct queueproperties is a u32. In kfdqueueacquirebuffers the expected...