Lucene search
+L

433155 matches found

EUVD
EUVD
‱added 2026/08/10 12:2 p.m.‱6 views

EUVD-2026-55387

In the Linux kernel, the following vulnerability has been resolved: dropmonitor: perform u64stats updates under IRQ-disabled section In netdmpackettracekfreeskbhit and netdmhwtrappacketprobe, u64statsupdatebegin / u64statsinc / u64statsupdateend were called after...

5.4AI score0.00189EPSS
SaveExploits0References2
EUVD
EUVD
‱added 2026/08/10 12:2 p.m.‱6 views

EUVD-2026-55386

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix memory leak in bpfjitfree When bpfintjitcompile is called for subprograms, it returns early during the first pass !prog-isfunc || extrapass is false, keeping ctx-offset alive for the subsequent extra pass. If...

5.3AI score0.00162EPSS
SaveExploits0References2
EUVD
EUVD
‱added 2026/08/10 12:2 p.m.‱5 views

EUVD-2026-55385

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix cork use-after-free in tcpbpfsendmsg tcpbpfsendmsg keeps msgtx across skstreamwaitmemory, which drops and reacquires the socket lock. Its error path tries to decide whether msgtx names the local temporary messag...

5.5AI score0.00134EPSS
SaveExploits0References5
EUVD
EUVD
‱added 2026/08/10 12:2 p.m.‱4 views

EUVD-2026-55384

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free freeing trigger private data Commit 61d445af0a7c "tracing: Add bulk garbage collection of freeing eventtriggerdata" moved the kfree of eventtriggerdata to a kthread that runs...

5.4AI score0.00373EPSS
SaveExploits0References2
EUVD
EUVD
‱added 2026/08/10 12:2 p.m.‱5 views

EUVD-2026-55383

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogixdp: Add missing error check for platformgetresource Add missing error check for platformgetresource return value to prevent NULL pointer dereference when memory resource is not available...

5.3AI score0.00173EPSS
SaveExploits0References3
EUVD
EUVD
‱added 2026/08/10 12:2 p.m.‱8 views

EUVD-2026-55382

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Count paired job fence as dependency in preparejob The DRM scheduler's preparejob callback counts the remaining non-signaled native dependencies for a job, preventing job submission until those plus job data and...

5.4AI score0.00175EPSS
SaveExploits0References4
EUVD
EUVD
‱added 2026/08/10 12:2 p.m.‱5 views

EUVD-2026-55381

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: cdns-dsi: Replace deprecated UNIVERSALDEVPMOPS The deprecated UNIVERSALDEVPMOPS macro uses the provided callbacks for both runtime PM and system sleep. This causes the DSI clocks to be disabled twice: once during...

5.3AI score0.00175EPSS
SaveExploits0References5
EUVD
EUVD
‱added 2026/08/10 12:2 p.m.‱6 views

EUVD-2026-55380

In the Linux kernel, the following vulnerability has been resolved: drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers drmdpsidebandparseremotedpcdread reads numbytes from the raw message and then unconditionally does: memcpybytes, &raw-msgidx, numbytes; without checking that idx...

5.5AI score0.00175EPSS
SaveExploits0References5
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱7 views

EUVD-2026-55379

In the Linux kernel, the following vulnerability has been resolved: drm/dp/mst: fix buffer overflows in sideband chunk accumulation drmdpsidebandappendpayload has three related bugs when processing device-provided sideband reply data: 1. Zero-length curchunklen underflow: msglen is a 6-bit field...

5.3AI score0.00226EPSS
SaveExploits0References5
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱8 views

EUVD-2026-55378

In the Linux kernel, the following vulnerability has been resolved: drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers Three sideband reply parsers read 16-bit fields as: val = raw-msgidx msgidx+1; and check bounds only after the fact. When idx == raw-curlen, raw-msgidx+1 reads...

5.3AI score0.00209EPSS
SaveExploits0References5
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱8 views

EUVD-2026-55377

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx: fix cleaner shader IB buffer overflow The cleaner shader sysfs path allocates a 16-dword 64 byte IB but incorrectly fills alignmask + 1 dwords. On GFX rings alignmask is 0xff, so the loop wrote 256 dwords into a...

5.4AI score0.00193EPSS
SaveExploits0References4
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱9 views

EUVD-2026-55376

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check amdgpuvmbofind result in GETMAPPINGINFO The AMDGPUGEMOPGETMAPPINGINFO path of amdgpugemopioctl looks up the bova for the buffer object in the caller's VM via amdgpuvmbofind, but uses the returned pointer without...

5.5AI score0.00173EPSS
SaveExploits0References3
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱7 views

EUVD-2026-55375

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Fix buffer overflow in steered register list allocation The size calculation for the steered register extarray uses only the geometry DSS mask gdssmask to determine the number of entries to allocate: total =...

5.7AI score0.00151EPSS
SaveExploits0References3
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱7 views

EUVD-2026-55374

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix context pstate override handling There are several problems in the context pstate handling code. The most serious ones are potential use-after-free and NULL pointer dereferences at context initialization time. Bot...

5.4AI score0.00134EPSS
SaveExploits0References4
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱9 views

EUVD-2026-55373

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate CPGFXSHADOW chunk size in CS pass1 Add a minimum-length check for the AMDGPUCHUNKIDCPGFXSHADOW chunk in amdgpucspass1, matching the gate already present for the IB, FENCE and BOHANDLES chunk types. The...

5.3AI score0.00175EPSS
SaveExploits0References5
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱11 views

EUVD-2026-55372

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix reversed error cleanup order in ucopy functions nouveauuvmmvmbinducopy and nouveauexecucopy place their error cleanup labels in allocation order rather than reverse allocation order. On a umemcpya failure for...

5.3AI score0.00175EPSS
SaveExploits0References5
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱8 views

EUVD-2026-55371

In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Avoid possible truncation with calculating visible size Calculating the visible size of the system framebuffer can result in truncation of the result. The calculation uses 32-bit arithmetics, which can overflow if the...

5.3AI score0.00206EPSS
SaveExploits0References3
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱8 views

EUVD-2026-55370

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controlled parallel submission slot. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry...

5.2AI score0.002EPSS
SaveExploits0References5
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱8 views

EUVD-2026-55369

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Return error on non-migratable faults requiring devmem Non-migratable faults that require devmem incorrectly jump to the 'out' label, which squashes the error code intended to be returned to the upper layers. Fix this by...

5.3AI score0.00206EPSS
SaveExploits0References3
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱7 views

EUVD-2026-55368

In the Linux kernel, the following vulnerability has been resolved: drm/xe/rtp: Add RINGFORCETONONPRIVDENY to OA whitelists Unconditionally whitelisting OA registers is a security violation. Set RINGFORCETONONPRIVDENY bit in OA nonpriv slots, so that OA registers don't get whitelisted by default...

5.3AI score0.00168EPSS
SaveExploits0References4
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱7 views

EUVD-2026-55367

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Hold a dma-buf reference for imported BOs An imported dma-buf BO is created as a ttmbotypesg BO whose reservation object is the exporter's dmabuf-resv. The importer, however, only takes a dma-buf reference after a...

5.3AI score0.00134EPSS
SaveExploits0References4
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱6 views

EUVD-2026-55366

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: Fix BO prefetch with CONSULTMEMADVISEPREFLOC When prefetch region is DRMXECONSULTMEMADVISEPREFLOC for a BO VMA, the code used it as an index into regiontomemtype, causing an out-of-bounds access since the value is -1...

5.4AI score0.00129EPSS
SaveExploits0References3
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱6 views

EUVD-2026-55365

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Reset currentop in xeptupdateopsinit xeptupdateopsinit fails to reset currentop to 0. On the vmbind path, opsexecute calls xeptupdateopsprepare inside the xevalidationguard / drmexecuntilalllocked loop. When that loop...

5.4AI score0.00138EPSS
SaveExploits0References4
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱8 views

EUVD-2026-55364

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix double call to drmschedentityfini Call sequence of double call: pvrcontextdestroy pvrcontextkillqueues pvrqueuekill drmschedentitydestroy drmschedentityfini // here pvrcontextput...

5.4AI score0.00125EPSS
SaveExploits0References4
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱8 views

EUVD-2026-55363

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix user array stride in pvrsetuobjarray pvrsetuobjarray copies an array of kernel objects to a userspace array whose element size is described by out-stride. When out-stride is different from the kernel object...

5.3AI score0.00131EPSS
SaveExploits0References4
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱7 views

EUVD-2026-55362

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: fix error checking of pvrvmcontextlookup Since pvrvmcontextlookup returns either NULL or a pointer, then stop using ISERR for checking the return value. Using ISERR leads to the kernel oops reported below. It can...

5.3AI score0.00209EPSS
SaveExploits0References4
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱8 views

EUVD-2026-55361

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vmctx-lock before mapping memory to GPU VM The drm gpuvm code doesn't protect find operation against map operation, and the driver needs to ensure a map operation shouldn't happen when a find operation is...

5.4AI score0.00163EPSS
SaveExploits0References4
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱7 views

EUVD-2026-55360

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds in allocateeventnotificationslot The valid event ids go from 0 to KFDSIGNALEVENTLIMIT allocateeventnotificationslot has an option to specify an event id to allocate at, used by CRIU. We weren't checking t...

5.3AI score0.00168EPSS
SaveExploits0References5
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱8 views

EUVD-2026-55359

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size We weren't checking whether the values provided in the private data in kfd CRIU restore were within bounds. For queue type, add a KFDQUEUETYPEMAX and ensure the...

5.3AI score0.00129EPSS
SaveExploits0References3
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱12 views

EUVD-2026-55358

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix 32-bit overflow in CWSR total size calculation totalcwsrsize was computed in 32-bit before being used as a BO/SVM allocation size. With large ctxsaverestoreareasize and debugmemorysize multiplied by the XCC count,...

5.3AI score0.00138EPSS
SaveExploits0References4
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱6 views

EUVD-2026-55357

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: detectlinkandlocalsink: DP alt mode timeout path leaks prevsink reference prevsink is unconditionally retained via dcsinkretain at function entry, but the DP alt mode timeout path inside SIGNALTYPEDISPLAYPORT...

5.3AI score0.00175EPSS
SaveExploits0References5
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱6 views

EUVD-2026-55356

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: bound EDID block reads to the response buffer virtiogetedidblock validates the read offset only against the device-supplied resp-size field, never against the fixed-size resp-edid array. The EDID block index is driven...

5.3AI score0.0019EPSS
SaveExploits0References5
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱7 views

EUVD-2026-55355

In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: require valid min/max vfreq for VRR Ensure the EDID provided min/max vfreq are valid. Most scenarios are already covered by coincidence through the checks in intelvrriscapable and intelvrrisinrange, but be more...

5.3AI score0.00168EPSS
SaveExploits0References5
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱7 views

EUVD-2026-55354

In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: check streams bounds before overflow The data-streams overflow check is done after the buffer overflow has already happened. Move the overflow check before the write. Side note, emitting a warning splat with a...

5.6AI score0.00142EPSS
SaveExploits0References5
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱7 views

EUVD-2026-55353

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma7.0: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit 9723a8bed3aa251a26bee4583bac9d8fb064dd44...

5.3AI score0.00175EPSS
SaveExploits0References4
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱9 views

EUVD-2026-55352

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma6.0: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit c17a508a7d652da3728f8bbc481bfffe96d65a87...

5.3AI score0.00209EPSS
SaveExploits0References5
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱6 views

EUVD-2026-55351

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.2: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit ae658afc7f47f6147371ec42cc6b1a793dfdb5af...

5.3AI score0.002EPSS
SaveExploits0References5
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱7 views

EUVD-2026-55350

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.0: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit 8d144a0eb09537055841af48c9e7c2d4cd48e84d...

5.3AI score0.00168EPSS
SaveExploits0References5
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱5 views

EUVD-2026-55349

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Return NULL on error in activeinstance Avoid returning &node-base when node is NULL due to OOM during GFPATOMIC allocation. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry picked...

5.3AI score0.00168EPSS
SaveExploits0References5
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱6 views

EUVD-2026-55348

In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: range check LFP Data Block paneltype2 While the paneltype from LFP Data Block is range checked, paneltype2 is not. Add a few helpers for range checking, and use them to not only check paneltype2, but also improve...

5.3AI score0.00168EPSS
SaveExploits0References4
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱5 views

EUVD-2026-55347

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx11: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit daa62107452d2451787c4248ca38fa2d1a0cbefd...

5.3AI score0.00168EPSS
SaveExploits0References5
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱5 views

EUVD-2026-55346

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix lifetime issue of amdgpuvmgettaskinfopasid The vm pointer returned from amdgpuvmgetvmfrompasid is only valid while the lock is still being held. Once xaunlockirqrestore is called and returned, the pointer is no...

5.2AI score0.00163EPSS
SaveExploits0References4
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱6 views

EUVD-2026-55345

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Do not leak siblings on proto context error After a successful BALANCE/PARALLELSUBMIT extension on context creation, error during processing of next user extension leaks the siblings array. Fix that. Discovered usin...

5.2AI score0.00168EPSS
SaveExploits0References5
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱5 views

EUVD-2026-55344

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix NULL deref in I915CONTEXTPARAMSSEU Setting context engine slot N into I915ENGINECLASSINVALID / I915ENGINECLASSINVALIDNONE and attempting to apply I915CONTEXTPARAMSSEU to the same slot N will deref NULL. Fix that...

5.3AI score0.00168EPSS
SaveExploits0References5
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱8 views

EUVD-2026-55343

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix NULL deref on schedengine alloc failure Avoid using intelcontextput before intelcontextinit in execlistscreatevirtual as the krefput inside would lead to NULL deref on the IOCTL path when schedengine allocation...

5.3AI score0.00189EPSS
SaveExploits0References2
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱6 views

EUVD-2026-55342

In the Linux kernel, the following vulnerability has been resolved: drm/i915/mst: limit DP MST ESI service loop The loop in inteldpcheckmststatus keeps servicing interrupts originating from the sink without bound. Add an upper bound to the new interrupts occurring during interrupt processing to n...

5.4AI score0.00198EPSS
SaveExploits0References3
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱7 views

EUVD-2026-55341

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: publish dpagemap early to avoid device mapping leak on error drmgpusvmgetpages only stored the local dpagemap into svmpages-dpagemap on the success path. If a later page failed e.g. -EOPNOTSUPP when ctx-allowmixed is...

5.3AI score0.00161EPSS
SaveExploits0References3
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱7 views

EUVD-2026-55340

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Account for NULL and handle pages in ttmpoolbackup Pages in ttmpoolbackup can be NULL or backup handles ttmbackuppageptrishandle, neither of which can be passed to setpagesarraywb or freed. Add a dedicated WB pass before...

5.3AI score0.00166EPSS
SaveExploits0References3
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱8 views

EUVD-2026-55339

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Release VFCT ACPI table reference amdgpuacpivfctbios fetches the VFCT table with acpigettable but never releases it. acpigettable takes a reference on the table incrementing its validationcount and mapping it on the 0...

5.3AI score0.00166EPSS
SaveExploits0References3
EUVD
EUVD
‱added 2026/08/10 12:1 p.m.‱9 views

EUVD-2026-55338

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix indefinite fence wait during GPU reset prereset only force-completes fences of MAPPED queues. A queue in any other state e.g. mid-eviction keeps its lastfence pending; after a GPU reset that fence never...

5.3AI score0.00155EPSS
SaveExploits0References2
Total number of security vulnerabilities433155