CVE-2026-23468

CVE-2026-23468 affects the Linux kernel’s DRM/amdgpu BO list handling. The issue was an attacker-controlled bo_number could trigger excessive memory allocation and slow list processing; the fix introduces a hard limit of 128k entries per BO list and returns -EINVAL when exceeded. Connected adviso...

CVE-2026-23467

CVE-2026-23467 affects the Linux kernel drm/i915/dmc driver. The vulnerability is a NULL pointer dereference that can occur during probe when DC6 is unexpectedly enabled, due to intel_power_domains_init_hw() calling intel_dmc_update_dc6_allowed_count() before intel_dmc_init(). The root cause is u...

CVE-2026-23466

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Open-code GGTT MMIO access protection GGTT MMIO access is currently protected by hotplug drmdeventer, which works correctly when the driver loads successfully and is later unbound or unloaded. However, if driver load fail...

CVE-2026-23430 drm/vmwgfx: Don't overwrite KMS surface dirty tracker

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Don't overwrite KMS surface dirty tracker We were overwriting the surface's dirty tracker here causing a memory leak...

CVE-2026-23430 drm/vmwgfx: Don't overwrite KMS surface dirty tracker

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Don't overwrite KMS surface dirty tracker We were overwriting the surface's dirty tracker here causing a memory leak...

PT-2026-30165

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.0-rc1-valkyria+ Description A use-after-free issue exists in the Linux kernel related to framebuffers and property blobs when calling drm dev unplug. The issue occurs when dereferencing freed pointers related...

The vulnerability of the `dc_construct_ctx()` function in the drivers/gpu/drm/amd/display/dc/core/dc.c file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in Linux operating systems allows a malicious actor to cause a system failure.

The vulnerability of the dcconstructctx function in the drivers/gpu/drm/amd/display/dc/core/dc.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to improper memory release memory leak. Exploiting this vulnerability can allow an...

The vulnerability of the intel_fbdev_set_suspend() function in the drivers/gpu/drm/i915/display/intel_fbdev.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the intelfbdevsetsuspend function in the drivers/gpu/drm/i915/display/intelfbdev.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to...

PT-2026-44334

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the msm ioctl gem info get metadata function where it unconditionally returns 0, ignoring error codes stored in ret. This occurs when the user buffer is too small or...

The vulnerability of the panthor_sched_unplug() function in the drivers/gpu/drm/panthor/panthor_sched.c file of the Panthor driver (which provides DRM support for ARM Mali CSF-based graphics processors) in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the panthorschedunplug function in the drivers/gpu/drm/panthor/panthorsched.c file of the Panthor driver which provides DRM support for ARM Mali CSF-based graphics processors in the Linux operating system is related to the use of memory after deallocation. Exploiting this...

The vulnerability of the mipi_dsi_remove_device_fn() function in the drivers/gpu/drm/drm_mipi_dsi.c driver of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the mipidsiremovedevicefn function in the drivers/gpu/drm/drmmipidsi.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to the execution of a loop with an unreachable exit condition “Infinite loop”. Exploiting this vulnerabilit...

The vulnerability of the vmw_kms_fb_create() function in the drivers/gpu/drm/vmwgfx/vmwgfx_kms.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the vmwkmsfbcreate function in the drivers/gpu/drm/vmwgfx/vmwgfxkms.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux kernel, is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

drm/vmwgfx: Return the correct value in vmw_translate_ptr functions

...

The vulnerability of the intel_context_find-active_request() function in the drivers/gpu/drm/i915/gt/intel_context.c module of the DRI support driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the intelcontextfind-activerequest function in the drivers/gpu/drm/i915/gt/intelcontext.c module of the DRI support driver for the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the panfrost_ioctl_madvise() function in the drivers/gpu/drm/panfrost/panfrost_drv.c driver module, which is part of the Direct Rendering Infrastructure (DRI) support driver for the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the panfrostioctlmadvise function in the drivers/gpu/drm/panfrost/panfrostdrv.c driver module related to the Linux kernel’s Direct Rendering Infrastructure DRI support mechanism is associated with improper cleaning or release of resources. Exploiting this vulnerability could...

CVE-2026-23317

A flaw was found in the drm/vmwgfx component of the Linux kernel. Incorrect error handling in the vmwtranslateptr functions could cause them to return a success status even when an internal lookup operation failed. This could lead to the use of uninitialized pointers and out-of-bounds OOB memory...

SUSE CVE-2026-23366

In the Linux kernel, the following vulnerability has been resolved: drm/client: Do not destroy NULL modes 'modes' in drmclientmodesetprobe may fail to kcalloc. If this occurs, we jump to 'out', calling modesdestroy on it, which dereferences it. This may result in a NULL pointer dereference in the...

EUVD-2026-15334

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix error handling in slot reset If the device has not recovered after slot reset is called, it goes to out label for error handling. There it could make decision based on uninitialized hive pointer and could result i...

CVE-2026-23338

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings Userspace can either deliberately pass in the too small numfences, or the required number can legitimately grow between the two calls to the userq wait...

CVE-2026-23338

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings Userspace can either deliberately pass in the too small numfences, or the required number can legitimately grow between the two calls to the userq wait...