Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/exynos: hdmi: reports a safe 640x480 mode as a fallback when no EDID is found When reading EDID fails and the driver reports no available modes, the DRM core adds an artificial 1024x786 mode to the connector. Unfortunately,...

drm/edid: fix OOB read in drm_parse_tiled_block()

...

CVE-2026-64546

A flaw was found in the Linux kernel. A specially crafted Extended Display Identification Data EDID, which describes display capabilities, can cause a heap out-of-bounds read in the drmparsetiledblock function within the drm/edid component. This vulnerability could lead to system instability or t...

EUVD-2026-49597

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drmparsetiledblock drmparsetiledblock casts the DisplayID block to a struct displayidtiledblock and reads the full fixed layout up to tile-topologyid7 without checking block-numbytes. The DisplayID...

CVE-2026-64285

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When populating a guestmemfd instance with the initial CPUID data for an SNP guest, acquire a writable pin on the source page as KVM will write back the...

EUVD-2026-48997

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When populating a guestmemfd instance with the initial CPUID data for an SNP guest, acquire a writable pin on the source page as KVM will write back the...

PT-2026-64506

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM SEV implementation when populating a guest memfd instance with initial CPUID data for an SNP guest. KVM may write back corrected CPUID information if the data...

EUVD-2026-39884

In the Linux kernel, the following vulnerability has been resolved: drm/gma500/oaktraillvds: fix hang on init failure The LVDS init code looks up an I2C adapter using i2cgetadapter and tries to read the EDID before falling back to allocating and registering its own adapter. The error handling doe...

CVE-2026-50205

System log files output unencrypted SMTP server authentication passwords alongside sensitive employee corporate identification data...

CVE-2026-50205

System log files output unencrypted SMTP server authentication passwords alongside sensitive employee corporate identification data...

CVE-2026-50205

System log files output unencrypted SMTP server authentication passwords alongside sensitive employee corporate identification data...

EUVD-2026-34217

System log files output unencrypted SMTP server authentication passwords alongside sensitive employee corporate identification data...

CVE-2026-50205

CVE-2026-50205 describes a vulnerability where system log files output unencrypted SMTP server authentication passwords along with sensitive employee identifiers. The brief does not specify affected products, vendors, or versions. Impact is stated as high confidentiality exposure (log leakage of ...

PT-2026-46156

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description System log files output unencrypted SMTP server authentication passwords and sensitive employee corporate identification data. Recommendations At the moment, the...

PT-2026-34366

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the amdgpu dm component when a sink is connected. The drm edid variable in aconnector is overwritten without freeing the previous allocation, which leads to a...

CVE-2023-54277

The CVE-2023-54277 entry concerns the Linux kernel udlfb fbdev driver. The root cause described in the provided sources is an endpoint type check failure for a USB bulk-OUT endpoint, leading to issues when the endpoint is not of the expected type (e.g., EDID reads failing and “BOGUS urb xfer” mes...

jshERP security vulnerabilities

jshERP Huaxia ERP is a homegrown ERP system by the individual developer of Ji Sheng Hua in China. A security vulnerability exists in jshERP v3.5, which stems from improper access control in the ResourceController.java component and could lead to access to ID data...

Central Medical Information System Unencrypted Information Disclosure

The vulnerability of the application software of the Central Medical Information System of the State Health Information System GIS SZ is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor to disclose identification data...

CVE-2025-38254 drm/amd/display: Add sanity checks for drm_edid_raw()

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add sanity checks for drmedidraw When EDID is retrieved via drmedidraw, it doesn't guarantee to return proper EDID bytes the caller wants: it may be either NULL that leads to an Oops or with too long bytes over t...

PT-2025-28882

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel’s DRM/AMD/display component where the drm edid raw function does not guarantee a proper Extended Display Identification Data EDID return. This can...