EUVD-2026-82157

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Associate BOs with every job that accesses them A submission can expand into a chain of jobs e.g. bin + render + cache clean. Implicit synchronization in v3dsubmitlockreservations is gated on each job's bo, but the BO li...

CVE-2026-93047 drm/v3d: Associate BOs with every job that accesses them

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Associate BOs with every job that accesses them A submission can expand into a chain of jobs e.g. bin + render + cache clean. Implicit synchronization in v3dsubmitlockreservations is gated on each job's bo, but the BO li...

CVE-2026-93047 drm/v3d: Associate BOs with every job that accesses them

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Associate BOs with every job that accesses them A submission can expand into a chain of jobs e.g. bin + render + cache clean. Implicit synchronization in v3dsubmitlockreservations is gated on each job's bo, but the BO li...

PT-2026-94845

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/v3d component where Buffer Objects BOs were only attached to the last job in a submission chain. When the final job is a CACHE CLEAN job, preceding RENDER or C...

CVE-2026-93047: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Associate BOs with every job that accesses them A submission can expand into a chain of jobs e.g. bin + render + cache clean. Implicit synchronization in v3dsubmitlockreservations is gated on each job's bo, but the BO li...

CVE-2026-93192: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Clear queue-activejob when v3dfencecreate fails The runjob callbacks for BIN, RENDER, TFU and CSD assign the incoming job to queue-activejob before calling v3dfencecreate. If v3dfencecreate fails, the callback returns NU...

PT-2026-94988

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/v3d component where the run job callbacks for BIN, RENDER, TFU, and CSD assign an incoming job to queue-active job before calling v3d fence create. If v3d fenc...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Avoid NULL pointer dereferencing in v3djobupdatestats The following kernel error was recently reported by Mesa CI: 800.139824 Unable to handle NULL pointer dereferencing at virtual address 0000000000000588 800.148619...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: pmdomain: bcm: bcm2835-power: Increase the ASB control timeout. The bcm2835asbcontrol function uses a tight polling loop to wait for the ASB bridge to acknowledge a request. During intensive workloads, this handshake intermittent...

v3d_get_multisync_submit_deps Heap Buffer Overflow DoS

The vulnerability of the v3dgetmultisyncsubmitdeps function in the drivers/gpu/drm/v3d/v3dsubmit.c module of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the execution of a loop with an unreachable exit condition “Infinite loop”. Exploiting this...

Linux DRI Kernel Heap Buffer Overflow DoS

The vulnerability of the v3drewritecsdjobwgcountsfromindirect function in the drivers/gpu/drm/v3d/v3dsched.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...

SUSE CVE-2026-74638

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues BIN, RENDER, TFU and CSD but has only a single, global reset. A timeout on any one queue therefore has to stop, reset and restart t...

SUSE CVE-2026-72327

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Reject invalid indirect BO handle in indirect CSD setup v3dgetcpuindirectcsdparams looks up the indirect buffer object from a userspace-supplied handle but never checks the result. A bogus or stale handle makes...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Invalid indirect BO handle is rejected during indirect CSD setup. The function v3dgetcpuindirectcsdparams looks up the indirect buffer object from a handle provided by the user space. However, it never checks the result....

CVE-2026-74638

A flaw was found in the Linux kernel's drm/v3d driver. This vulnerability arises from concurrent handling of scheduler timeout events across different hardware queues, which share a single global reset mechanism. When a reset occurs in one queue while another is processing a timeout, the...

CVE-2026-74638

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues BIN, RENDER, TFU and CSD but has only a single, global reset. A timeout on any one queue therefore has to stop, reset and restart t...

UBUNTU-CVE-2026-74638

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues BIN, RENDER, TFU and CSD but has only a single, global reset. A timeout on any one queue therefore has to stop, reset and restart t...

CVE-2026-74638

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues BIN, RENDER, TFU and CSD but has only a single, global reset. A timeout on any one queue therefore has to stop, reset and restart t...

CVE-2026-74638

CVE-2026-74638 affects the V3D DRM scheduler in the Linux kernel, used on hardware such as the Raspberry Pi 5 . The V3D GPU exposes multiple independent hardware queues (BIN, RENDER, TFU, CSD) but performs only a single global reset . When a timeout on one queue triggers a global reset while anot...

EUVD-2026-64575

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues BIN, RENDER, TFU and CSD but has only a single, global reset. A timeout on any one queue therefore has to stop, reset and restart t...