604 matches found
amd_eop_poc
amdeoppoc CVE-2020-8950 AMD User Experience Program Launcher from Radeon Software Privilege Escalation FileWrite eop Read the note.txt https://heynowyouseeme.blogspot.com/2020/02/privilege-escalation-filewrite-eop-in.html...
CVE-2023-20598-PDFWKRNL
Эксплойт Proof of Concept для драйвера AMD Radeon PDFWKRNL.sys, предназначенный для работы из процесса с Low Integrity...
CVE-2026-74416
A flaw was found in the Linux kernel's drm/radeon component. When a Graphics Processing Unit GPU reset operation fails to acquire a necessary lock, a memory buffer is not properly released. Repeated occurrences of this issue can lead to a gradual depletion of kernel memory. This memory exhaustion...
Linux Distros Unpatched Vulnerability : CVE-2026-74416
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/radeon: fix memory leak in radeonringrestore on lock failure radeonringrestore takes ownership of the data buffer allocated by radeonringbackup. The caller...
CVE-2026-74416
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix memory leak in radeonringrestore on lock failure radeonringrestore takes ownership of the data buffer allocated by radeonringbackup. The caller radeongpureset only frees it in the non-restore branch; in the restor...
CVE-2026-74417
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix integer overflow in radeonalignpitch radeonalignpitch has the same kind of overflow issue as the old amdgpu helper: both the alignment round-up add and the final 'aligned cpp' calculation can overflow signed int. ...
UBUNTU-CVE-2026-74417
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix integer overflow in radeonalignpitch radeonalignpitch has the same kind of overflow issue as the old amdgpu helper: both the alignment round-up add and the final 'aligned cpp' calculation can overflow signed int. ...
UBUNTU-CVE-2026-74416
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix memory leak in radeonringrestore on lock failure radeonringrestore takes ownership of the data buffer allocated by radeonringbackup. The caller radeongpureset only frees it in the non-restore branch; in the restor...
CVE-2026-74417
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix integer overflow in radeonalignpitch radeonalignpitch has the same kind of overflow issue as the old amdgpu helper: both the alignment round-up add and the final 'aligned cpp' calculation can overflow signed int. ...
CVE-2026-74416
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix memory leak in radeonringrestore on lock failure radeonringrestore takes ownership of the data buffer allocated by radeonringbackup. The caller radeongpureset only frees it in the non-restore branch; in the restor...
UBUNTU-CVE-2026-72272
In the Linux kernel, the following vulnerability has been resolved: fbdev: radeon: fix potential memory leak in radeonfbpciregister The function radeonfbpciregister allocates memory for modelist by calling radeoncheckmodes which calls fbaddvideomode. The memory is appended to info-modelist, but i...
EUVD-2026-59563
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix memory leak in radeonringrestore on lock failure radeonringrestore takes ownership of the data buffer allocated by radeonringbackup. The caller radeongpureset only frees it in the non-restore branch; in the restor...
CVE-2026-74417
CVE-2026-74417 affects the Linux kernel DRM/Radeon path, specifically the radeon_align_pitch() routine. The issue is an integer overflow in the alignment round-up and the final pitch calculation that can yield an invalid pitch or a zero-sized dumb buffer in radeon_mode_dumb_create(). The fix intr...
CVE-2026-74416 drm/radeon: fix memory leak in radeon_ring_restore() on lock failure
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix memory leak in radeonringrestore on lock failure radeonringrestore takes ownership of the data buffer allocated by radeonringbackup. The caller radeongpureset only frees it in the non-restore branch; in the restor...
CVE-2026-74417 drm/radeon: fix integer overflow in radeon_align_pitch()
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix integer overflow in radeonalignpitch radeonalignpitch has the same kind of overflow issue as the old amdgpu helper: both the alignment round-up add and the final 'aligned cpp' calculation can overflow signed int. ...
CVE-2026-74417 drm/radeon: fix integer overflow in radeon_align_pitch()
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix integer overflow in radeonalignpitch radeonalignpitch has the same kind of overflow issue as the old amdgpu helper: both the alignment round-up add and the final 'aligned cpp' calculation can overflow signed int. ...
CVE-2026-74416 drm/radeon: fix memory leak in radeon_ring_restore() on lock failure
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix memory leak in radeonringrestore on lock failure radeonringrestore takes ownership of the data buffer allocated by radeonringbackup. The caller radeongpureset only frees it in the non-restore branch; in the restor...
EUVD-2026-59564
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix integer overflow in radeonalignpitch radeonalignpitch has the same kind of overflow issue as the old amdgpu helper: both the alignment round-up add and the final 'aligned cpp' calculation can overflow signed int. ...
CVE-2026-74416
CVE-2026-74416 affects the Linux kernel DRM/Radeon stack. The vulnerability is a memory-leak in radeon_ring_restore() on lock failure: radeon_ring_restore() takes ownership of the buffer allocated by radeon_ring_backup(), but when radeon_ring_lock() fails it returns early and does not kvfree(data...
CVE-2026-72272 fbdev: radeon: fix potential memory leak in radeonfb_pci_register()
In the Linux kernel, the following vulnerability has been resolved: fbdev: radeon: fix potential memory leak in radeonfbpciregister The function radeonfbpciregister allocates memory for modelist by calling radeoncheckmodes which calls fbaddvideomode. The memory is appended to info-modelist, but i...