Linux Distros Unpatched Vulnerability : CVE-2026-90362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm/dsi: Drop devpmoppsetrate0 devpmoppsetrate0 removes the vote specified in required- opps but does not actually park the clock, making it run without the...

Linux Distros Unpatched Vulnerability : CVE-2026-90363

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm: don't tear down KMS twice when KMS init fails When priv-kmsinit mdp4kmsinit / mdp5kmsinit fails partway through, both display drivers already tear thei...

Linux Distros Unpatched Vulnerability : CVE-2026-93059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm: Fix taskstruct reference leak in recoverworker getpidtask increments the task reference count, but the corresponding puttaskstruct was missing in the...

Linux Distros Unpatched Vulnerability : CVE-2026-93058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm: Only fini scheduler after successful init msmringbuffernew destroys a partially initialized ring through msmringbufferdestroy when an allocation or...

DEBIAN-CVE-2026-93058

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Only fini scheduler after successful init msmringbuffernew destroys a partially initialized ring through msmringbufferdestroy when an allocation or scheduler setup step fails. If drmschedinit fails before it finishes...

AZL-102188 CVE-2026-93058 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Only fini scheduler after successful init msmringbuffernew destroys a partially initialized ring through msmringbufferdestroy when an allocation or scheduler setup step fails. If drmschedinit fails before it finishes...

AZL-102678 CVE-2026-90362 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: Drop devpmoppsetrate0 devpmoppsetrate0 removes the vote specified in required-opps but does not actually park the clock, making it run without the necessary power backing. Drop the explicit call to it. Every call sit...

CVE-2026-93060

This vulnerability affects the Linux kernel DRM MSM Adreno GPU driver, specifically the a6xx_gpu_init() error path. The root cause is a use-after-free : when initialization fails, a6xx_destroy() frees the a6xx_gpu object, leaving adreno_gpu pointing to freed memory. The fix preserves the error co...

CVE-2026-93060 drm/msm/adreno: fix use after free on error path in a6xx_gpu_init()

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix use after free on error path in a6xxgpuinit The a6xxdestroy function frees "a6xxgpu" and so "adrenogpu" points to freed memory. Preserve the error code before freeing the memory to avoid a use after free...

EUVD-2026-82170

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix use after free on error path in a6xxgpuinit The a6xxdestroy function frees "a6xxgpu" and so "adrenogpu" points to freed memory. Preserve the error code before freeing the memory to avoid a use after free...

CVE-2026-93059 drm/msm: Fix task_struct reference leak in recover_worker

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix taskstruct reference leak in recoverworker getpidtask increments the task reference count, but the corresponding puttaskstruct was missing in the else branch, leaking a reference on every GPU hang recovery. Patchwork...

CVE-2026-93059

CVE-2026-93059 affects the drm/msm driver in the Linux kernel . The root cause is a missing put_task_struct() call in the else branch of recover_worker, while get_pid_task() had already incremented the task reference count. This results in a task_struct reference leak on every GPU hang recovery ,...

EUVD-2026-82169

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix taskstruct reference leak in recoverworker getpidtask increments the task reference count, but the corresponding puttaskstruct was missing in the else branch, leaking a reference on every GPU hang recovery. Patchwork...

EUVD-2026-82168

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Only fini scheduler after successful init msmringbuffernew destroys a partially initialized ring through msmringbufferdestroy when an allocation or scheduler setup step fails. If drmschedinit fails before it finishes...

CVE-2026-93058 drm/msm: Only fini scheduler after successful init

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Only fini scheduler after successful init msmringbuffernew destroys a partially initialized ring through msmringbufferdestroy when an allocation or scheduler setup step fails. If drmschedinit fails before it finishes...

CVE-2026-93058

CVE-2026-93058 affects the Linux kernel's drm/msm driver (Qualcomm Adreno GPU subsystem). The vulnerability exists in msm_ringbuffer_new(): when an allocation or scheduler setup step fails, the error path calls msm_ringbuffer_destroy(), which in turn calls drm_sched_fini() even if drm_sched_init(...

CVE-2026-90363

CVE-2026-90363 affects the Linux kernel DRM MSM (Qualcomm) display driver . When the KMS initialization function (mdp4_kms_init() or mdp5_kms_init()) fails partway through, the individual display drivers tear down KMS state before returning the error. The common error path in msm_drm_init() then ...

CVE-2026-90362

CVE-2026-90362 affects the Linux kernel 's drm/msm/dsi driver (Qualcomm Display Serial Interface). The root cause is an explicit call to dev_pm_opp_set_rate(0) , which removes the operating performance point vote specified in required-opps but does not actually park the clock, leaving it running ...

CVE-2026-90362 drm/msm/dsi: Drop dev_pm_opp_set_rate(0)

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: Drop devpmoppsetrate0 devpmoppsetrate0 removes the vote specified in required-opps but does not actually park the clock, making it run without the necessary power backing. Drop the explicit call to it. Every call sit...

CVE-2026-90363 drm/msm: don't tear down KMS twice when KMS init fails

In the Linux kernel, the following vulnerability has been resolved: drm/msm: don't tear down KMS twice when KMS init fails When priv-kmsinit mdp4kmsinit / mdp5kmsinit fails partway through, both display drivers already tear their KMS state down via mdp4destroy / mdp5kmsdestroy before returning th...