Data from an abandoned stream leaks into the next stream on a reused context

The withcontext constructors of the stream encoders and decoders used the borrowed context as it was. When a stream was abandoned on a context, for example an encoder dropped before finish after an error, whatever it left there was carried into the next stream: the input buffered by the previous...

RUSTSEC-2026-0391 Data from an abandoned stream leaks into the next stream on a reused context

The withcontext constructors of the stream encoders and decoders used the borrowed context as it was. When a stream was abandoned on a context, for example an encoder dropped before finish after an error, whatever it left there was carried into the next stream: the input buffered by the previous...

PT-2026-125050

The with context constructors of the stream encoders and decoders used the borrowed context as it was. When a stream was abandoned on a context, for example an encoder dropped before finish after an error, whatever it left there was carried into the next stream: the input buffered by the previous...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check the correct bounds for stream encoder instances for DCN303 Why & How The engid for DCN303 cannot be more than 1, since we have only two instances of stream encoders. Check the correct boundary condition for...

CVE-2026-68235

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: dce100: skip non-DP stream encoders for DP MST On DCE8-class ASICs e.g. Bonaire, the resource pool contains digital DIG stream encoders plus one analog DAC encoder. When assigning a stream encoder for a second...

CVE-2026-46263 drm/amd/display: Fix out-of-bounds stream encoder index v3

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds stream encoder index v3 engid can be negative and that streamencregs can be indexed out of bounds. engid is used directly as an index into streamencregs, which has only 5 entries. When engid is ...

Linux Distros Unpatched Vulnerability : CVE-2022-50079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check correct bounds for stream encoder instances for DCN303 Why & How engi...

SUSE CVE-2022-50079

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check correct bounds for stream encoder instances for DCN303 Why & How engid for DCN303 cannot be more than 1, since we have only two instances of stream encoders. Check the correct boundary condition for engine ...

CVE-2022-50079

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check correct bounds for stream encoder instances for DCN303 Why & How engid for DCN303 cannot be more than 1, since we have only two instances of stream encoders. Check the correct boundary condition for engine ...

kernel: drm/amd/display: Check correct bounds for stream encoder instances for DCN303

A flaw was found in the Linux kernel's AMD display driver. A missing boundary check when referencing stream encoder instances on DCN303 hardware allows an out-of-bounds memory access. A local user could exploit this vulnerability to cause a denial of service DoS or potentially expose sensitive...