CVE-2021-47142 drm/amdgpu: Fix a use-after-free

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix a use-after-free looks like we forget to set ttm-sg to NULL. Hit panic below 1235.844104 general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b7b4b: 0000 1 SMP DEBUGPAGEALLOC NOPTI 1235.989074...

kernel: Linux kernel: Denial of Service and information disclosure via undefined bit shift in drm/ttm

A flaw was found in the Linux kernel's drm/ttm component. A local user could exploit an undefined behavior in bit shifting, specifically when a signed 32-bit value is shifted by 31 bits, which cannot be represented in an 'int' type. This vulnerability could lead to local information disclosure,...

kernel: drm/ttm: Fix a NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix a NULL pointer dereference The LRU mechanism may look up a resource in the process of being removed from an object. The locking rules here are a bit unclear but it looks currently like res-bo assignment is protected ...

kernel: Linux kernel: Denial of Service and information disclosure via undefined bit shift in drm/ttm

A flaw was found in the Linux kernel's drm/ttm component. A local user could exploit an undefined behavior in bit shifting, specifically when a signed 32-bit value is shifted by 31 bits, which cannot be represented in an 'int' type. This vulnerability could lead to local information disclosure,...

kernel: drm/ttm: Fix dummy res NULL ptr deref bug

A flaw was found in the ttm module in the Linux kernel. A NULL pointer dereference can be triggered due to an improper check, resulting in a denial of service...

PT-2025-25963 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the drm/i915/ttm component. The issue involves the potential leak of the CCS state from the previous user, which the...

PT-2025-25994 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A null pointer dereference bug has been resolved in the Linux kernel. The issue occurred in the drm/ttm module, where the bo-resource value was not checked before accessing the mem typ...

SUSE CVE-2019-19927

In the Linux kernel 5.0.0-rc7 as distributed in ubuntu/linux.git on kernel.ubuntu.com, mounting a crafted f2fs filesystem image and performing some operations can lead to slab-out-of-bounds read access in ttmputpages in drivers/gpu/drm/ttm/ttmpagealloc.c. This is related to the vmwgfx or ttm modu...

GSD-2023-1000788 drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED

drm/ttm: fix undefined behavior in bit shift for TTMTTFLAGPRIVPOPULATED This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000429 drm/i915/ttm: consider CCS for backup objects

drm/i915/ttm: consider CCS for backup objects This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

PT-2023-33506 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns the drm/i915/ttm component, specifically regarding the consideration of CCS for backup objects. The actual impact and attack plausibility have not yet been proven...

PT-2025-41032

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s DRM/amdgpu subsystem related to size validation for non-exclusive domains. Specifically, the amdgpu bo validate size function did not properly check f...

Unbreakable Enterprise kernel security update

4.1.12-124.69.5 - x86/smpboot: check cpuinitializedmask first after returning from schedule Dongli Zhang Orabug: 34798594 4.1.12-124.69.4 - btrfs: Remove BUGON as it is causing kernel to panic Rhythm Mahajan Orabug: 34840579 4.1.12-124.69.3 - btrfs: fix missing return for a non-void function...

GSD-2022-1005524 drm/ttm: Fix dummy res NULL ptr deref bug

drm/ttm: Fix dummy res NULL ptr deref bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

GSD-2022-1005111 drm/i915/ttm: don't leak the ccs state

drm/i915/ttm: don't leak the ccs state This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit b431cffb4883b9e90d48f0c408674c50fef428a...

GSD-2022-1004989 drm/i915/ttm: fix CCS handling

drm/i915/ttm: fix CCS handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit 97434cb55bd884bd268626ec41489f79b261b2d4, it wa...

PT-2022-33410 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to a dummy resource NULL pointer dereference bug in the drm/ttm component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-33369 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to a potential security vulnerability in the Linux Kernel, specifically in the drm/i915/ttm component. The actual impact and attack plausibility have not yet been proven...

UVI-2021-1002197 drm/ttm: fix memleak in ttm_transfered_destroy

drm/ttm: fix memleak in ttmtransfereddestroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

GSD-2021-1002197 drm/ttm: fix memleak in ttm_transfered_destroy

drm/ttm: fix memleak in ttmtransfereddestroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...