kernel: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available

A flaw was found in KVM in the Linux kernel. This vulnerability occurs due to improper validation of memory management unit MMU page roots after these pages are made available. An attacker could exploit this by triggering a scenario where KVM attempts to map memory into an invalid root, causing...

kernel: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available

A flaw was found in KVM in the Linux kernel. This vulnerability occurs due to improper validation of memory management unit MMU page roots after these pages are made available. An attacker could exploit this by triggering a scenario where KVM attempts to map memory into an invalid root, causing...

EUVD-2026-48534

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. The...

EUVD-2026-48532

Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs. During workload submission involving a fence exported by the GPU driver, the reference count of the underlyin...

Chromium: CVE-2026-16424 Use after free in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

PT-2026-64421

Name of the Vulnerable Software and Affected Versions GPU DDK affected versions not specified Description An integer overflow occurs during the calculation of physical offsets for sparse PMRs Partial Memory Regions within the PMRLogicalOffsetToPhysicalOffset function. For PMRs larger than 4 GB,...

Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.168, using free after in the GPU in Google Chrome allowed a remote attacker who had compromised the renderer process to perform an out-of-bounds memory write through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of after-free in GPUs in Google Chrome before version 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.216, reading data from the GPU in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.216, writing the GPU information in Google Chrome allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-55798 vulnerabilities

Vulnerabilities for packages: superset, tensorflow-gpu-jupyter, open-webui, openstack-horizon-2026.1-fips, openstack-horizon-2025.2, tritonserver-backend-vllm-cuda-13.0, lmcache-cuda-12.8, text-generation-inference, mlflow, openstack-horizon-2026.1, label-studio, openstack-horizon-2025.2-fips,...

CVE-2026-59200 vulnerabilities

Vulnerabilities for packages: superset, tensorflow-gpu-jupyter, open-webui, openstack-horizon-2026.1-fips, openstack-horizon-2025.2, tritonserver-backend-vllm-cuda-13.0, lmcache-cuda-12.8, text-generation-inference, mlflow, openstack-horizon-2026.1, label-studio, openstack-horizon-2025.2-fips,...

CVE-2026-54060 vulnerabilities

Vulnerabilities for packages: superset, tensorflow-gpu-jupyter, open-webui, openstack-horizon-2026.1-fips, openstack-horizon-2025.2, tritonserver-backend-vllm-cuda-13.0, lmcache-cuda-12.8, text-generation-inference, mlflow, openstack-horizon-2026.1, label-studio, openstack-horizon-2025.2-fips,...

CVE-2026-59199 vulnerabilities

Vulnerabilities for packages: superset, tensorflow-gpu-jupyter, open-webui, openstack-horizon-2026.1-fips, openstack-horizon-2025.2, tritonserver-backend-vllm-cuda-13.0, lmcache-cuda-12.8, text-generation-inference, mlflow, openstack-horizon-2026.1, label-studio, openstack-horizon-2025.2-fips,...

GHSA-62P4-GMF7-7G93 vulnerabilities

Vulnerabilities for packages: superset, tensorflow-gpu-jupyter, open-webui, openstack-horizon-2026.1-fips, openstack-horizon-2025.2, tritonserver-backend-vllm-cuda-13.0, lmcache-cuda-12.8, text-generation-inference, mlflow, openstack-horizon-2026.1, label-studio, openstack-horizon-2025.2-fips,...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the decodesliceunittiles process. An attacker can cause a heap buffer over-read by supplying a malformed PPS with tile geometry inconsistent with the SPS, leading to out-of-bounds memory access during decoding...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the decodesliceunitWPP function when decoding a WPP HEVC slice. An attacker can cause a read past the end of an allocated vector by crafting PPS/SPS headers so that the computed ctbAddrRS value exceeds the size of...

CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...