CVE-2026-62337

The SNARK Verifier generic verifier is vulnerable to a flaw in the Halo 2 aggregation circuit prior to version 0.2.5 . The root cause is that EcPointLoader::multi_scalar_multiplication passes a base paired with Value::Constant(ONE) to sum_with_const, which delegates to halo2-lib's EccChip::sum. B...

CVE-2026-62337: axiom-crypto snark-verifier: SNARK Verifier is a generic (S)NARK verifier

SNARK Verifier is a generic SNARK verifier. Prior to 0.2.5, the Halo 2 aggregation circuit can mishandle proof points encoded as the point at infinity. EcPointLoader::multiscalarmultiplication places a Value::Assigned base paired with Value::ConstantONE into its unscaled variable-base list and...

CVE-2026-93058

A flaw was found in the Linux kernel's drm/msm component. When the drmschedinit function fails to complete the scheduler initialization, the system attempts to finalize a partially initialized scheduler. This can lead to an unstable state or a denial of service, as the teardown process assumes...

CVE-2026-90363

A flaw was found in the Linux kernel's drm/msm component. During the initialization of Kernel Mode Setting KMS, an error handling path attempts to deallocate resources twice. This double deallocation leads to a use-after-free error, which can cause a system crash. A local attacker could potential...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fixed the check on the return value of iommumapsgtable, and avoided issuing a WARN message. The commit “iommu: Return the full error code from iommumapsgatomic” changed iommumapsgtable to return an ssizet value, even in...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: Remove devpmoppsetrate0. devpmoppsetrate0 removes the vote specified in required-opps, but actually does not pause the clock. As a result, it runs without the necessary power support. Remove this explicit call to it...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix NULL-deref on snapshot tear down In cases where initialization fails early or on platforms that do not utilize a DPU controller, the deinitialization code may be invoked with the kms pointer set to NULL. Patchwork:...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: serial: msm: Disable DMA for kernel console UART Currently, concurrent writes from user space and the kernel to the console can trigger a race condition that results in an infinite loop of the same messages being printed...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: fix mismatch between power and frequency During DPU runtime suspend, calling devpmoppsetratedev, 0 drops the MMCX rail to MINSVS while the core clock frequency remains at its original highest rate. When runtime resum...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: cleanup of FB if dpuformatpopulatelayout fails If dpuformatpopulatelayout fails, then the FB is prepared, but not cleaned up. This results in the pincount being leaked from the GEM object, causing a crash during DRM...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Avoid NULL dereference in msmdispstateprintregs If the allocation in msmdispstatedumpregs fails, then block-state can be NULL. The msmdispstateprintregs function does have code to handle this: if reg dumpaddr = reg; ...b...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fixed the issue of null pointer dereference on the pointer edp. The pointer dev is initialized, and the pointer edp is dereferenced before edp is checked for being null. This could lead to a null pointer dereference issu...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: pinctrl: qcom: msm: mark certain pins as invalid for interrupts On some platforms, the UFS-reset pin has no interrupt logic in TLMM but is still registered as a GPIO in the kernel. This allows the user-space to trigger a BUG in t...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: check return value after calling platformgetresourcebyname This will cause a null‑ptr‑deref if platformgetresourcebyname returns NULL; we must check the return value. Patchwork:...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp4: Fixed a refcount leak in mdp4modesetinitintf. In the function ofgraphgetremotenode, the remote device node pointer is returned with the refcount incremented. We should use ofnodeput on it when it is no longer needed...

CVE-2026-98313

A flaw was found in the Linux kernel's Qualcomm MSM DisplayPort driver. When display link training fails to initialize the connection, the driver improperly attempts an idle teardown sequence on an unpowered controller. A local user could trigger this condition during display state transitions,...

SUSE CVE-2026-98180

In the Linux kernel, the following vulnerability has been resolved: drm/msm: RCU-free the scheduler-containing ring and VM objects Both struct msmringbuffer and struct msmgemvm embed a struct drmgpuscheduler. msmringbufferdestroy and the VM free callback msmgemvmfree call drmschedfini on the...

CVE-2026-98180

A flaw was found in the Linux kernel's Direct Rendering Manager DRM MSM driver. When ring buffer or virtual memory objects containing a GPU scheduler are freed, synchronization fences exported to user space continue to reference the deallocated scheduler memory. A local unprivileged attacker can...

SUSE CVE-2026-98313

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: skip PUSHIDLE when the link was never enabled msmdpdisplayatomicenable returns early when link training fails, leaving -poweron false and the main link down. msmdpdisplayatomicdisable nevertheless writes...

AZL-110450 CVE-2026-98313 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: skip PUSHIDLE when the link was never enabled msmdpdisplayatomicenable returns early when link training fails, leaving -poweron false and the main link down. msmdpdisplayatomicdisable nevertheless writes...