https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 22:40:20 +0000 https://vulnerability.circl.lu/vuln/bell-cve-2026-80728 <p><strong>Affected:</strong> Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> https://vulnerability.circl.lu/vuln/bell-cve-2026-80728 https://vulnerability.circl.lu/vuln/certfr-2026-avi-1232 certfr-2026-avi-1232 https://vulnerability.circl.lu/vuln/certfr-2026-avi-1232 https://vulnerability.circl.lu/vuln/fkie_cve-2026-80728 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Revert &#34;drm/amdgpu: fix aperture mapping leak&#34;</p> <p>devres teardown is LIFO. The aperture devres node was registered after the DRM device node, so devres_release_all() unmaps the aperture before the DRM device release callback fires amdgpu_device_fini_sw(). IP sw_fini callbacks (e.g. vcn_v4_0_sw_fini) write to fw_shared through a pointer derived from aper_base_kaddr, causing a kernel page fault on probe failure / rollback:</p> <p>BUG: unable to handle page fault ... PMD 0 RIP: vcn_v4_0_sw_fini+0x7b/0x170 [amdgpu] Call Trace: amdgpu_device_fini_sw amdgpu_driver_release_kms devm_drm_dev_init_release devres_release_all</p> <p>This reverts commit d871e99879cb5fd1fa798b006b4888887e63a17a.</p> <p>(cherry picked from commit 336e0cd576817ac64a4b394ca2b3680029f3e37f)</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Revert &#34;drm/amdgpu: fix aperture mapping leak&#34;</p> <p>devres teardown is LIFO. The aperture devres node was registered after the DRM device node, so devres_release_all() unmaps the aperture before the DRM device release callback fires amdgpu_device_fini_sw(). IP sw_fini callbacks (e.g. vcn_v4_0_sw_fini) write to fw_shared through a pointer derived from aper_base_kaddr, causing a kernel page fault on probe failure / rollback:</p> <p>BUG: unable to handle page fault ... PMD 0 RIP: vcn_v4_0_sw_fini+0x7b/0x170 [amdgpu] Call Trace: amdgpu_device_fini_sw amdgpu_driver_release_kms devm_drm_dev_init_release devres_release_all</p> <p>This reverts commit d871e99879cb5fd1fa798b006b4888887e63a17a.</p> <p>(cherry picked from commit 336e0cd576817ac64a4b394ca2b3680029f3e37f)</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-80728 https://vulnerability.circl.lu/vuln/ghsa-gr66-4v49-m3fh <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Revert &#34;drm/amdgpu: fix aperture mapping leak&#34;</p> <p>devres teardown is LIFO. The aperture devres node was registered after the DRM device node, so devres_release_all() unmaps the aperture before the DRM device release callback fires amdgpu_device_fini_sw(). IP sw_fini callbacks (e.g. vcn_v4_0_sw_fini) write to fw_shared through a pointer derived from aper_base_kaddr, causing a kernel page fault on probe failure / rollback:</p> <p>BUG: unable to handle page fault ... PMD 0 RIP: vcn_v4_0_sw_fini+0x7b/0x170 [amdgpu] Call Trace: amdgpu_device_fini_sw amdgpu_driver_release_kms devm_drm_dev_init_release devres_release_all</p> <p>This reverts commit d871e99879cb5fd1fa798b006b4888887e63a17a.</p> <p>(cherry picked from commit 336e0cd576817ac64a4b394ca2b3680029f3e37f)</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Revert &#34;drm/amdgpu: fix aperture mapping leak&#34;</p> <p>devres teardown is LIFO. The aperture devres node was registered after the DRM device node, so devres_release_all() unmaps the aperture before the DRM device release callback fires amdgpu_device_fini_sw(). IP sw_fini callbacks (e.g. vcn_v4_0_sw_fini) write to fw_shared through a pointer derived from aper_base_kaddr, causing a kernel page fault on probe failure / rollback:</p> <p>BUG: unable to handle page fault ... PMD 0 RIP: vcn_v4_0_sw_fini+0x7b/0x170 [amdgpu] Call Trace: amdgpu_device_fini_sw amdgpu_driver_release_kms devm_drm_dev_init_release devres_release_all</p> <p>This reverts commit d871e99879cb5fd1fa798b006b4888887e63a17a.</p> <p>(cherry picked from commit 336e0cd576817ac64a4b394ca2b3680029f3e37f)</p> https://vulnerability.circl.lu/vuln/ghsa-gr66-4v49-m3fh https://vulnerability.circl.lu/vuln/msrc_cve-2026-80728 msrc_CVE-2026-80728 https://vulnerability.circl.lu/vuln/msrc_cve-2026-80728 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-80728 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 95 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: Revert &#34;drm/amdgpu: fix aperture mapping leak&#34; devres teardown is LIFO. The aperture devres node was registered after the DRM device node, so devres_release_all() unmaps the aperture before the DRM device release callback fires amdgpu_device_fini_sw(). IP sw_fini callbacks (e.g. vcn_v4_0_sw_fini) write to fw_shared through a pointer derived from aper_base_kaddr, causing a kernel page fault on probe failure / rollback: BUG: unable to handle page fault ... PMD 0 RIP: vcn_v4_0_sw_fini+0x7b/0x170 [amdgpu] Call Trace: amdgpu_device_fini_sw amdgpu_driver_release_kms devm_drm_dev_init_release devres_release_all This reverts commit d871e99879cb5fd1fa798b006b4888887e63a17a. (cherry picked from commit 336e0cd576817ac64a4b394ca2b3680029f3e37f)</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 95 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: Revert &#34;drm/amdgpu: fix aperture mapping leak&#34; devres teardown is LIFO. The aperture devres node was registered after the DRM device node, so devres_release_all() unmaps the aperture before the DRM device release callback fires amdgpu_device_fini_sw(). IP sw_fini callbacks (e.g. vcn_v4_0_sw_fini) write to fw_shared through a pointer derived from aper_base_kaddr, causing a kernel page fault on probe failure / rollback: BUG: unable to handle page fault ... PMD 0 RIP: vcn_v4_0_sw_fini+0x7b/0x170 [amdgpu] Call Trace: amdgpu_device_fini_sw amdgpu_driver_release_kms devm_drm_dev_init_release devres_release_all This reverts commit d871e99879cb5fd1fa798b006b4888887e63a17a. (cherry picked from commit 336e0cd576817ac64a4b394ca2b3680029f3e37f)</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-80728