amd gpu

CVE-2026-63879 is a newly published Linux kernel vulnerability in the AMDGPU graphics driver that deserves attention well beyond the usual Linux security mailing-list audience. The flaw, rated 7.8 High by the Linux kernel CNA, affects how AMDGPU’s Heterogeneous Memory Management code obtains...

CVE-2026-63853 is now tracked as a Linux kernel vulnerability affecting AMDGPU’s VCN 4.0 video-encode path, but the immediate fix is deliberately narrow: newer kernels refuse command-stream submissions that request unsupported 64-bit user-fence writes on the relevant hardware ring. For Windows...

Linux 7.3 is expected to add a new Direct Rendering Manager “color format” connector property later in 2026, with AMDGPU as the first kernel graphics driver wired up to let user space request RGB or YUV output formats. That sounds like a small plumbing change, and in one sense it is. But for...

Linus Torvalds released Linux 7.2-rc1 on Sunday, June 28, 2026, opening the public stabilization phase for the next mainline Linux kernel after two weeks of merge-window work following Linux 7.1. The release is not a finished kernel, and that distinction matters. What arrived this weekend is...

CVE-2026-53313 was published by NVD on June 26, 2026, for a Linux kernel AMD display driver flaw in dc_dmub_srv error handling, where diagnostic logging can dereference a NULL service pointer and crash systems using affected amdgpu display paths rather than gracefully returning. That sounds...

On May 28, 2026, kernel.org assigned CVE-2026-46220 to an AMDGPU flaw in the Linux kernel’s SDMA 4.0 fence-emission path, where crafted unprivileged command submissions could hit BUG_ON() assertions and panic the system. The patch is small, but the lesson is not. This is not the story of an...

CVE-2026-43298, published to the NVD on May 8, 2026, documents a Linux kernel amdgpu driver flaw in which AMDGPU’s VCN 2.5 virtual-function teardown path tried to release a poison interrupt that the VF never enabled. That sounds almost comically narrow, but it is exactly the kind of kernel...

On May 8, 2026, CVE-2026-43318 was published for a Linux kernel amdgpu driver bug in amdgpu_dma_buf_move_notify, where incorrect synchronization during DMA-BUF buffer movement could make an AMD GPU update page tables too early and trigger a likely GPU page fault. The vulnerability is not a...

CVE-2026-31566 is a small Linux kernel fix with a large lesson: in GPU drivers, object lifetime rules are not bookkeeping trivia but security boundaries. The flaw sits in the AMDGPU and AMDKFD integration path, where a fence returned from GPU job scheduling could be released before the code...

CVE-2026-31488 is a reminder that in the Linux graphics stack, seemingly small state-machine mistakes can cascade into serious memory-safety failures. The flaw sits in amdgpu’s Display Core path, where DSC validation incorrectly clears the CRTC mode_changed flag even when other, unrelated mode...

A recently disclosed Linux-kernel vulnerability, tracked as CVE-2023-51042, exposes a fence-related use‑after‑free in the AMD GPU driver (amdgpu) that was fixed upstream in the 6.4.12 stable release; the bug can crash affected kernels or otherwise deny availability to systems that accept...

Microsoft’s short, machine‑readable attestation that “Azure Linux includes this open‑source library and is therefore potentially affected” is accurate for Azure Linux builds — but it is a product‑scoped statement, not proof that no other Microsoft artifact includes the same vulnerable upstream...

A subtle missing check in the Linux kernel’s AMD DRM display code has been cataloged as CVE-2025-38091 and corrected upstream; the defect can produce kernel warnings and, in some circumstances, a local denial-of-service by allowing the display stack to hit an oops when querying a plane...

A subtle NULL‑check omission in the Linux kernel’s AMD GPU display code (drm/amd/display) — tracked as CVE‑2024‑26648 — has been fixed upstream after maintainers discovered that the function edp_setup_replay() dereferenced internal structures before verifying pointer validity, creating a...

A recently disclosed vulnerability in the Linux kernel’s AMD DRM power-management code — tracked as CVE-2025-37769 — allows a carefully crafted input to trigger a division-by-zero inside the SMU11 power-management path, causing kernel crashes and sustained denial-of-service on affected systems...

Microsoft’s brief product mapping for CVE‑2024‑26913 — the Linux kernel fix described as “drm/amd/display: Fix dcn35 8k30 Underflow/Corruption Issue” — is accurate for the artifact it covers, but it is not a blanket assurance that no other Microsoft product can include the same vulnerable...