CVE-2024-26817-amdkfd

-- CVE-2024-26817 AMD KFD の以下のファイル drivers/gpu/drm/amd/amdkfd/kfdchardev.c にセキュリティ脆弱性を発見しました。ioctl 識別子は AMDKFDIOCGETPROCESSAPERTURESNEW です。 関数 kfdioctlgetprocessaperturesnew 内で、ユーザーから提供された args-numofnodes のデータが乗算され、そのまま kzalloc に渡されます。これにより、一部のプラットフォームで整数オーバーフローが発生する可能性があります。...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: igb: Do not free qvector unless a new one was allocated. Avoid potential use-after-free conditions under memory pressure. If kzalloc fails, qvector will be freed, but it will remain in the original adapter-qvectorvidx array...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fixed a possible null pointer derefrence issue. In tegracrtcreset, new memory is allocated using kzalloc, but no checks are performed. Before calling drmatomichelpercrtcreset, the state of the memory allocation should ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Added a NULL pointer check for kzalloc Why & How Check the return pointer of kzalloc before using it...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1, and Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: media: mtk-vcodec: There is a potential NULL pointer dereference issue in the SCP code. The return value of devmkzalloc needs to be checked to avoid NULL pointer dereferences. This is similar to the CVE-2022-3113 vulnerability...

SUSE CVE-2026-90034

In the Linux kernel, the following vulnerability has been resolved: usb: image: mdc800: change kmalloc to kzalloc Change the kmalloc calls in usbmdc800init for irqurbbuffer and downloadurbbuffer to kzalloc, avoiding potential stack leaks if a shorter message is received in mdc800usbirq and...

Linux Distros Unpatched Vulnerability : CVE-2026-93176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Fix dangling pointer in plane reset function amdgpudmplanedrmplanereset frees the old state before allocating a new one. If kzalloc fails, the...

Linux Distros Unpatched Vulnerability : CVE-2026-90412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet: fix return status of RMI log page on allocation failure nvmetexecutegetlogpagermi leaves 'status' holding NVMESCSUCCESS set by the successful...

DEBIAN-CVE-2026-93176

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in plane reset function amdgpudmplanedrmplanereset frees the old state before allocating a new one. If kzalloc fails, the function returns without updating the state pointer, leaving a dangli...

DEBIAN-CVE-2026-93175

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in CRTC reset function amdgpudmcrtcresetstate frees the old state before allocating a new one. If kzalloc fails, the function returns without updating the state pointer, leaving a dangling...

CVE-2026-93175

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in CRTC reset function amdgpudmcrtcresetstate frees the old state before allocating a new one. If kzalloc fails, the function returns without updating the state pointer, leaving a dangling...

AZL-102309 CVE-2026-93175 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in CRTC reset function amdgpudmcrtcresetstate frees the old state before allocating a new one. If kzalloc fails, the function returns without updating the state pointer, leaving a dangling...

AZL-102836 CVE-2026-93176 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in plane reset function amdgpudmplanedrmplanereset frees the old state before allocating a new one. If kzalloc fails, the function returns without updating the state pointer, leaving a dangli...

CVE-2026-90412

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix return status of RMI log page on allocation failure nvmetexecutegetlogpagermi leaves 'status' holding NVMESCSUCCESS set by the successful nvmetreqfindns call when the kzalloc for the log buffer fails. It then jumps to...

CVE-2026-93176 drm/amd/display: Fix dangling pointer in plane reset function

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in plane reset function amdgpudmplanedrmplanereset frees the old state before allocating a new one. If kzalloc fails, the function returns without updating the state pointer, leaving a dangli...

CVE-2026-93176 drm/amd/display: Fix dangling pointer in plane reset function

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in plane reset function amdgpudmplanedrmplanereset frees the old state before allocating a new one. If kzalloc fails, the function returns without updating the state pointer, leaving a dangli...

CVE-2026-93176

CVE-2026-93176 is a dangling pointer vulnerability in the Linux kernel's DRM/AMD display driver, specifically in amdgpu_dm_plane_drm_plane_reset(). The function frees the old plane state before allocating a replacement; if the subsequent kzalloc() call fails, the state pointer is left pointing to...

CVE-2026-93175 drm/amd/display: Fix dangling pointer in CRTC reset function

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in CRTC reset function amdgpudmcrtcresetstate frees the old state before allocating a new one. If kzalloc fails, the function returns without updating the state pointer, leaving a dangling...

CVE-2026-93175 drm/amd/display: Fix dangling pointer in CRTC reset function

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in CRTC reset function amdgpudmcrtcresetstate frees the old state before allocating a new one. If kzalloc fails, the function returns without updating the state pointer, leaving a dangling...

PT-2026-94760

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvmet execute get log page rmi function where the status variable retains a success value NVME SC SUCCESS even when kzalloc fails to allocate the log buffer. This...