EUVD-2025-12901

Malicious code in bioql PyPI...

EUVD-2025-27165

Malicious code in bioql PyPI...

EUVD-2024-29059

Malicious code in bioql PyPI...

EUVD-2025-31943

Malicious code in bioql PyPI...

EUVD-2022-55492

Malicious code in bioql PyPI...

EUVD-2023-59533

Malicious code in bioql PyPI...

EUVD-2025-24400

Malicious code in bioql PyPI...

EUVD-2025-27345

Malicious code in bioql PyPI...

EUVD-2022-55219

Malicious code in bioql PyPI...

SUSE CVE-2025-39906

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: remove oem i2c adapter on finish Fixes a bug where unbinding of the GPU would leave the oem i2c adapter registered resulting in a null pointer dereference when applications try to access the invalid device. cherr...

kernel: drm/gem: Acquire references on GEM handles for framebuffers

In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released while the GEM buffer object is attached to a DRM framebuffer. This leads to the release of the dma-buf backing the buffer object, if any. 1...

CVE-2022-50440 drm/vmwgfx: Validate the box size for the snooped cursor

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate the box size for the snooped cursor Invalid userspace dma surface copies could potentially overflow the memcpy from the surface to the snooped image leading to crashes. To fix it the dimensions of the copybox...

CVE-2022-50440

The CVE-2022-50440 issue in the Linux kernel affects the drm/vmwgfx subsystem. It describes a check that could fail to validate the box size when snooped cursor data is copied from a DMA surface, potentially overflowing memcpy and causing crashes. The fix is to validate the dimensions of the copy...

PT-2025-40104

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the drm/amdkfd module. A shift-out-of-bounds warning can occur if get num sdma queues or get num xgmi sdma queues returns 0, leading to a shift...

PT-2025-40125

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the drm/vmwgfx module related to cursor handling. Insufficient validation of the copybox size for snooped cursors could lead to memory copy...

drm/vc4: don't check if plane->state->fb == state->fb

...

drm/amd/pm: fix a potential gpu_metrics_table memory leak

...

CVE-2025-46711

CVE-2025-46711 affects Imagination Technologies PowerVR-GPU via the GPU DDK. The issue arises from improper GPU system calls that can trigger a NULL pointer dereference in the kernel when used by software running with non-privileged permissions, leading to potential kernel crashes (DoS). CVSS ind...

CVE-2025-25177

CVE-2025-25177 is described in connected sources as a vulnerability in Imagination Technologies’ PowerVR-GPU (GPU DDK) where a roll-back of the pvr_exp_fence that is not finalised can cause a use-after-free in the kernel. The impact is described as potential kernel instability (use-after-free) wi...

SUSE CVE-2023-53388

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Clean dangling pointer on bind error path mtkdrmbind can fail, in which case drmdevput is called, destroying the drmdevice object. However a pointer to it was still being held in the private object, and that pointer...