564 matches found
CVE-2025-39747
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Add error handling for krealloc in metadata setup Function msmioctlgeminfosetmetadata now checks for krealloc failure and returns -ENOMEM, avoiding potential NULL pointer dereference. Explicitly avoids GFPNOFAIL due to...
CVE-2025-39747 drm/msm: Add error handling for krealloc in metadata setup
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Add error handling for krealloc in metadata setup Function msmioctlgeminfosetmetadata now checks for krealloc failure and returns -ENOMEM, avoiding potential NULL pointer dereference. Explicitly avoids GFPNOFAIL due to...
CVE-2025-39740
The CVE-2025-39740 entry concerns a Linux kernel vulnerability in the DRM XE migration path. It describes a potential use-after-free (UAF) scenario if a fence_wait is performed after the previous fence has already been put(), on the error path. The fix changes the control flow so that the put() i...
drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities
...
drm/amd/display: Avoid a NULL pointer dereference
...
DEBIAN-CVE-2025-38703
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Make dma-fences compliant with the safe access rules Xe can free some of the data pointed to by the dma-fences it exports. Most notably the timeline name can get freed if userspace closes the associated submit queue. At t...
UBUNTU-CVE-2025-38703
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Make dma-fences compliant with the safe access rules Xe can free some of the data pointed to by the dma-fences it exports. Most notably the timeline name can get freed if userspace closes the associated submit queue. At t...
CVE-2025-38705 drm/amd/pm: fix null pointer access
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix null pointer access Writing a string without delimiters ' ', '\n', '\0' to the under gpuod/fanctrl sysfs or pppowerprofilemode for the CUSTOM profile will result in a null pointer dereference...
drm/amdkfd: Don't call mmput from MMU notifier callback
...
drm/sched: Increment job count before swapping tail spsc queue
...
drm/msm: Fix a fence leak in submit error path
...
drm/amd/display: Do not return negative stream id for array
...
drm/i915/gt: Cleanup partial engine discovery failures
...
drm/amd/display: Handle dml allocation failure to avoid crash
...
drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
...
drm/msm: Fix another leak in the submit error path
...
drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
...
drm/amd/display: Add a dc_state NULL check in dc_state_release
...