CVE-2026-46215-POC

CVE-2026-46215: DRM GEM changehandle Use-After-Free unprivileged LPE Local privilege escalation via a use-after-free in the DRM core ioctl DRMIOCTLGEMCHANGEHANDLE drmgemchangehandleioctl, ioctl nr 0xD2. Reachable by any user with access to a render node /dev/dri/renderD, granted to the active...

Linux Distros Unpatched Vulnerability : CVE-2026-80741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/log: Fix out-of-bounds read on empty message length drmlogdrawkmsgrecord accesses slen - 1 to strip the trailing newline, but len is unsigned int. If len is...

Linux Distros Unpatched Vulnerability : CVE-2026-80749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/connector/hdmi: Fix out of bounds memory read A helper function was copying a given audio infoframe into the connector's copy but using the size of the...

The vulnerability of the `panthor_kernel_bodestroy()` function in the `drivers/gpu/drm/panthor/panthor_gem.c` file of the Panthor driver (which provides DRM support for ARM Mali CSF-based graphics processors) in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the panthorkernelbodestroy function in the drivers/gpu/drm/panthor/panthorgem.c file of the Panthor driver which provides DRM support for ARM Mali CSF-based graphics processors in the Linux operating system is related to the reutilization of previously freed memory. Exploitin...

The vulnerability of the xe_vm_madvise_ioctl() function in the drivers/gpu/drm/xe/xe_vm_madvise.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the xevmmadviseioctl function in the drivers/gpu/drm/xe/xevmmadvise.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a...

The vulnerability of the drm_gem_change_handle_ioctl() function in the Direct Rendering Manager (DRM) subsystem of Linux kernels allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the changehandle function in the Direct Rendering Manager DRM subsystem of Linux kernels relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

Linux Distros Unpatched Vulnerability : CVE-2026-53142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/display: fix oops in suspend/shutdown without display The xe driver keeps track of whether to probe display, and whether display hardware is there, using...

CVE-2026-43287 drm: Account property blob allocations to memcg

In the Linux kernel, the following vulnerability has been resolved: drm: Account property blob allocations to memcg DRMIOCTLMODECREATEPROPBLOB allows userspace to allocate arbitrary-sized property blobs backed by kernel memory. Currently, the blob data allocation is not accounted to the allocatin...

The vulnerability in the `fake_get_pages()` function of the `drivers/gpu/drm/i915/selftests/i915_gem_gtt.c` file, a driver for the Direct Rendering Infrastructure (DRI) of the Linux operating system, allows a hacker to induce a service failure.

The vulnerability of the fakegetpages function in the drivers/gpu/drm/i915/selftests/i915gemgtt.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system...

Linux Distros Unpatched Vulnerability : CVE-2023-54217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Revert drm/msm: Add missing check and destroy for allocorderedworkqueue This reverts commit 643b7d0869cc7f1f7a5ac7ca6bd25d88f54e31d0. A recent patch that tried ...

EUVD-2022-36310

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-53002

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/i915: Fix a memory leak with reused mmapoffset drmvmanodeallow and drmvmanoderevoke should be called in balanced pairs. We call drmvmanodeallow once per-fil...

Linux Distros Unpatched Vulnerability : CVE-2023-53077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix shift-out-of- bounds in CalculateVMAndRowBytes WHY When...

Linux Distros Unpatched Vulnerability : CVE-2023-53090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: Fix an illegal memory access In the kfdwaitonevents function, the kfdeventwaiter structure is allocated by alloceventwaiters, but the event field of...

Linux Distros Unpatched Vulnerability : CVE-2021-47354

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/sched: Avoid data corruptions Wait for all dependencies of a job to complete before killing it to avoid data corruptions. CVE-2021-47354 Note that Nessus...

Linux DRM Race Condition / Use-After-Free

Linux has an issue where drmfileupdatepid calls getpid too late, which creates a race condition that can lead to use-after-free of a struct pid. I am sending this to security@ and to the drm-misc maintainers - based on...

The vulnerability in the `drm_mode_setcrtc()` function of the `drivers/gpu/drm/drm_crtc.c` file of the Linux operating system’s DRM driver module allows a attacker to influence the integrity and accessibility of information, and execute arbitrary code.

The vulnerability of the drmmodesetcrtc function in the drivers/gpu/drm/drmcrtc.c file of the Linux operating system’s DRM driver module relates to access to uninitialized dynamic memory. Exploiting this vulnerability could allow a attacker to influence the integrity and accessibility of...