CVE-2026-45979

The CVE affects the Linux kernel DRM/amdgpu path, specifically the amdgpu_cs_parser_bos cleanup. In low memory conditions, kmalloc can fail, and the fix ensures a clean exit by unlocking the mutex. It also notes that amdgpu_bo_list_put is not needed, as that work is handled in amdgpu_cs_parser_fi...

CVE-2026-45979

drm/amdgpu: clean up the amdgpucsparserbos...

Regular Expression Denial of Service (ReDoS)

Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the Parser::cleanup function. Symfony\Component\Yaml\Parser::cleanup strips the optional %YAML directive header, leading comments, and document start/end markers before parsing. The origina...

CVE-2026-45305: YAML Parser ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex

More info at https://symfony.com/cve-2026-45305...