Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix double call to drmschedentityfini Call sequence of double call: pvrcontextdestroy pvrcontextkillqueues pvrqueuekill drmschedentitydestroy drmschedentityfini // here pvrcontextput...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Preallocation of size page table using device address Commit 0a8224058a58 “drm/imagination: Fix page count for page table for map interface” passed the device address to pvrmmuopcontextcreate. However, the...

CVE-2026-65584: Imagination Technologies Graphics DDK: Software installed and run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in…

Software installed and run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in the kernel. The overflow occurs when processing resolved Linux/Android fence synchronization checkpoints, while user checkpoints are excluded from the stack array. Successful...

CVE-2026-18629: Imagination Technologies Graphics DDK: A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can lead memory allocation…

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can lead memory allocation failure. If the allocation failure is not properly handled, the compiler may dereference a NULL pointer at a controlled offset, resulting in a crash of the compiler process. On...

CVE-2026-19199: Imagination Technologies Graphics DDK: Software installed and run as a non-privileged user may conduct improper system calls to allocate physical memory

Software installed and run as a non-privileged user may conduct improper system calls to allocate physical memory. A 32-bit integer overflow in the KM driver during page-to-byte conversion of an allocation size can result in an undersized kernel buffer allocation. This may allow unallocated or...

CVE-2026-74912: Imagination Technologies Graphics DDK: On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is…

On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range. Integer truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and...

CVE-2026-65587: Imagination Technologies Graphics DDK: A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB write in the…

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB write in the GPU user-space driver, leading to memory corruption and possible browser/GPU process crash. The software writes data past the end of an intended memory offset. Writing outside t...

CVE-2026-74915: Imagination Technologies Graphics DDK: A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or…

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or write crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable further exploits ...

CVE-2026-65586: Imagination Technologies Graphics DDK: Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in…

Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use, replace with another allocation and cause arbitrary memory reads or writes to physical memory pages. A memory buffer managed by a CPU thread of control driver and accessed by ...

CVE-2026-15466: Imagination Technologies Graphics DDK: Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condition in…

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condition in hardware performance counters buffer’s destruction path leading to read and/or write UAF. The race condition in the destruction path could lead to reference counter being decrement...

CVE-2026-98949

A flaw was found in the Linux kernel's Imagination PowerVR graphics driver. When splitting overlapping virtual memory mappings, the driver fails to release memory references and improperly links buffer objects. A local user can exploit this vulnerability by submitting crafted memory mapping...

CVE-2026-99004

A flaw was found in the Imagination Technologies GPU driver drm/imagination in the Linux kernel. An integer underflow in the driver's page table calculation can lead to a Denial of Service DoS. A local user can exploit this vulnerability when requesting memory mappings that cross page table...

Linux Distros Unpatched Vulnerability : CVE-2026-99004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Size page table preallocation by device address Commit 0a8224058a58...

Linux Distros Unpatched Vulnerability : CVE-2026-98949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix reference and vmbo handling in remap When a map overlaps part of an...

SUSE CVE-2026-98949

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix reference and vmbo handling in remap When a map overlaps part of an existing mapping, pvrvmgpuvaremap splits the mapping into prev/next parts covering what the request did not take, instead of creating...

SUSE CVE-2026-99004

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Size page table preallocation by device address Commit 0a8224058a58 "drm/imagination: Fix page count for page table for map interface" passed the device address to pvrmmuopcontextcreate, but the preallocation is...

DEBIAN-CVE-2026-99004

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Size page table preallocation by device address Commit 0a8224058a58 "drm/imagination: Fix page count for page table for map interface" passed the device address to pvrmmuopcontextcreate, but the preallocation is...

CVE-2026-99004

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Size page table preallocation by device address Commit 0a8224058a58 "drm/imagination: Fix page count for page table for map interface" passed the device address to pvrmmuopcontextcreate, but the preallocation is...

DEBIAN-CVE-2026-98949

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix reference and vmbo handling in remap When a map overlaps part of an existing mapping, pvrvmgpuvaremap splits the mapping into prev/next parts covering what the request did not take, instead of creating...

CVE-2026-98949

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix reference and vmbo handling in remap When a map overlaps part of an existing mapping, pvrvmgpuvaremap splits the mapping into prev/next parts covering what the request did not take, instead of creating...