kernel: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: amdkfdfreegttmem clear the correct pointer Pass pointer reference to amdgpubounref to clear the correct pointer, otherwise amdgpubounref clear the local variable, the original pointer not set to NULL, this could cause...

USN-7506-4 linux-lts-xenial vulnerabilities

Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in...

PT-2025-21047 · Intel · Intel Arc Gpu

Name of the Vulnerable Software and Affected Versions: IntelR Arc™ GPU affected versions not specified Description: The issue is related to an improper conditions check that may allow an authenticated user to potentially enable denial of service via local access. Recommendations: At the moment,...

PT-2025-21052 · Intel · Intel Data Center Gpu Flex Series

Name of the Vulnerable Software and Affected Versions: IntelR Data Center GPU Flex Series for Windows versions prior to 31.0.101.4314 Description: The issue is related to improper buffer restrictions for some IntelR Data Center GPU Flex Series for Windows drivers. This may allow an authenticated...

Amazon Linux 2023 : nvidia-open (ALAS2023NVIDIA-2025-061)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-061 advisory. NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code...

Amazon Linux 2023 : nvidia-kmod-common (ALAS2023NVIDIA-2025-063)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-063 advisory. NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code...

Amazon Linux 2023 : libnvidia-nscq (ALAS2023NVIDIA-2025-067)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-067 advisory. NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code...

PT-2025-21056 · Intel · Intel Data Center Gpu Flex Series

Name of the Vulnerable Software and Affected Versions: IntelR Data Center GPU Flex Series for Windows versions prior to 31.0.101.4314 Description: The issue is related to improper access control in the IntelR Data Center GPU Flex Series for Windows driver, which may allow an authenticated user to...

Intel® Arc™ GPU Advisory

Summary: A potential security vulnerability in some Intel® Arc™ GPU may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28036 Description: Improper conditions check for some Intel® Arc™ GPU may allow an...

Amazon Linux 2023 : cuda-drivers (ALAS2023NVIDIA-2025-071)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-071 advisory. NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code...

Amazon Linux 2023 : cuda-compat-12-8 (ALAS2023NVIDIA-2025-072)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-072 advisory. NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code...

PT-2025-21055 · Intel · Intel Data Center Gpu Flex Series

Name of the Vulnerable Software and Affected Versions: IntelR Data Center GPU Flex Series for Windows versions prior to 31.0.101.4255 Description: The issue is related to improper access control in the IntelR Data Center GPU Flex Series for Windows driver software. This may allow an authenticated...

Amazon Linux 2023 : nvidia-imex (ALAS2023NVIDIA-2025-064)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-064 advisory. NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code...

Amazon Linux 2023 : kmod-nvidia-open-dkms (ALAS2023NVIDIA-2025-069)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-069 advisory. NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code...

Amazon Linux 2023 : nvidia-persistenced (ALAS2023NVIDIA-2025-060)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-060 advisory. NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code...

USN-7506-3 linux-fips vulnerabilities

Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in...

USN-7506-2 linux-aws vulnerabilities

Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in...

USN-7506-1 linux, linux-aws, linux-kvm vulnerabilities

Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in...

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-7506-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7506-1 advisory. Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of devi...

SUSE CVE-2025-37853

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: debugfs hanghws skip GPU with MES debugfs hanghws is used by GPU reset test with HWS, for MES this crash the kernel with NULL pointer access because dqm-packetmgr is not setup for MES path. Skip GPU with MES for now,...