Database/NVIDIA / GPU stack
NVIDIA and GPU stack vulnerabilities
GPU driver, firmware, CUDA, Container Toolkit, vGPU, and accelerator software CVEs, including NVIDIAScape and the rest of the escapes specific to shared GPU hardware. The layer no other vulnerability database treats as a first-class target.
1,315 entries27 critical0 known exploitedFilter and search this layer
2026396
- NVIDIA Linux GPU driver: read-only memory permissions are not preserved, allowing unprivileged writesHighSep 30, 2026
- NVIDIA Linux GPU driver: mapping stays usable after the backing memory is freed and reusedHighSep 30, 2026
- NVIDIA vGPU: a guest can reach privileged host GPU resources it is not authorized forHighSep 30, 2026
- NVIDIA Linux GPU driver: user-supplied data reaches a format stringHighSep 30, 2026
- NVIDIA vGPU Manager: guest-triggered out-of-bounds write in the host kernel mode layerHighSep 30, 2026
- NVIDIA vGPU Manager: crafted data in the GSP tracing shared buffer causes improper accessHighSep 30, 2026
- NVIDIA vGPU Manager: crafted guest RPC message causes an out-of-bounds write in the GSP pluginHighSep 30, 2026
- NVIDIA vGPU Manager: guest-triggered out-of-bounds read in the host kernel mode layerHighSep 30, 2026
- NVIDIA GPU driver: use-after-free reachable by an unprivileged user through ordinary driver callsHighSep 30, 2026
- NVIDIA Linux GPU driver: mismatched buffers during event buffer setup cause a kernel out-of-bounds writeHighSep 30, 2026
- NVIDIA vGPU Manager: guest-triggered integer overflow leads to memory corruptionHighSep 30, 2026
- NVIDIA vGPU plugin: guest RPC with an invalid performance state list size causes an out-of-bounds writeHighSep 30, 2026
- NVIDIA Linux driver NGX updater: outdated embedded crypto library is vulnerable to type confusionHighSep 30, 2026
- NVIDIA Windows GPU driver: use-after-free in the kernel mode layerHighSep 30, 2026
- NVIDIA GPU driver: out-of-bounds array access in the kernel mode layerHighSep 30, 2026
- NVIDIA GPU driver: incorrect conversion between numeric types in the kernel mode layerHighSep 30, 2026
- NVIDIA GPU driver: integer overflow in size arithmetic leads to an out-of-bounds writeHighSep 30, 2026
- NVIDIA GPU driver: unprivileged out-of-bounds writes in the kernel mode layerHighSep 30, 2026
- NVIDIA GPU driver: out-of-bounds reads leak kernel heap and stack contents to an unprivileged userHighSep 30, 2026
- NVIDIA vGPU Manager on Linux: out-of-bounds reads in the host kernel mode layerHighSep 30, 2026
- NVIDIA GPU firmware: access of an uninitialized pointer reachable from a local attackerHighSep 30, 2026
- NVIDIA vGPU Manager on Linux: out-of-bounds read in GPU firmwareHighSep 30, 2026
- NVIDIA GPU driver: integer underflow in the kernel mode layerHighSep 30, 2026
- NVIDIA vGPU Manager on Linux: out-of-bounds write in the host kernel mode layerHighSep 30, 2026
- NVIDIA Windows GPU driver: untrusted user pointer is dereferenced without validationHighSep 30, 2026
- NVIDIA Linux GPU driver: unprivileged user bypasses an authorization check and changes privileged settingsHighSep 30, 2026
- NVIDIA Linux GPU driver: double-free of imported memory state in the kernel moduleHighSep 30, 2026
- NVIDIA GPU driver: a user can access memory belonging to another user's processHighSep 30, 2026
- NVIDIA Linux GPU driver: unprivileged user triggers use-after-free in the kernel moduleHighSep 30, 2026
- NVIDIA Linux GPU driver: ioctl input buffer size is unvalidated, giving a kernel out-of-bounds writeHighSep 30, 2026
- NVIDIA Linux GPU driver: user-triggerable NULL pointer dereference in the kernel moduleHighSep 30, 2026
- NVIDIA Linux GPU driver: handle recycle race causes type confusion in the kernel moduleHighSep 30, 2026
- NVIDIA CUDA driver on Windows: library loaded from an uncontrolled search pathHighSep 30, 2026
- NVIDIA Windows GPU driver: escape handler authorization check based on client context can be bypassedHighSep 30, 2026
- NVIDIA Linux GPU driver: type confusion in the kernel mode layerHighSep 30, 2026
- NVIDIA NVAPI on Windows: out-of-bounds write reachable by a local attackerHighSep 30, 2026
- NVIDIA vGPU Manager on Linux: incorrect resource transfer across isolation boundariesHighSep 30, 2026
- NVIDIA Windows GPU driver: integer overflow in the DIAG escape handler causes an out-of-bounds writeHighSep 30, 2026
- NVIDIA Windows GPU driver: incorrect comparison in the kernel moduleHighSep 30, 2026
- NVIDIA Windows GPU driver: incorrect buffer size calculation in the kernel mode layerHighSep 30, 2026
- NVIDIA Windows GPU driver: use-after-free with a scope-changing impact beyond the vulnerable componentHighSep 30, 2026
- NVIDIA Windows GPU driver: type confusion in the kernel moduleHighSep 30, 2026
- NVIDIA Windows GPU driver: integer underflow in the kernel moduleHighSep 30, 2026
- NVIDIA Linux GPU driver: incorrect authorization lets an unprivileged user write read-only memoryHighSep 30, 2026
- NVIDIA Windows GPU driver: unprivileged user causes an out-of-bounds write in the kernel mode layerHighSep 30, 2026
- NVIDIA open GPU kernel module: missing self-reference guard in map cleanup gives a use-after-freeHighSep 30, 2026
- NVIDIA open GPU kernel module: memory access permissions are lost during DMA mappingHighSep 30, 2026
- NVIDIA GPU driver: error-handling path operates on an improperly initialized resourceHighSep 30, 2026
- NVIDIA open GPU kernel module: read-only DMA-BUF imported from another device becomes writableHighSep 30, 2026
- NVIDIA Windows GPU driver: out-of-bounds read with no privileges required, leaking data and crashing the driverHighSep 30, 2026
- NVIDIA vGPU Virtual GPU Manager: guest VM can trigger an out-of-bounds write in the host via crafted RPCHighSep 30, 2026
- NVIDIA GPU driver for Windows: missing authorization in the kernel module allows cross-scope information disclosureHighSep 30, 2026
- NVIDIA GPU driver for Linux: signature verification can be bypassed under memory pressureHighSep 30, 2026
- NVIDIA GPU driver: local user can make the kernel mode driver dereference an untrusted pointerHighSep 30, 2026
- NVIDIA GPU driver for Windows: out-of-bounds write in the kernel module leads to code executionHighSep 30, 2026
- NVIDIA GPU driver for Linux: read-only memory becomes writable because permissions are not preservedHighSep 30, 2026
- NVIDIA open GPU kernel module: use-after-free in the event delivery path races file closeHighSep 30, 2026
- NVIDIA GPU driver: out-of-bounds writes in the kernel mode layer reachable by a privileged local userMediumSep 30, 2026
- NVIDIA GPU driver: unbounded string operation in the kernel mode layer causes an out-of-bounds readMediumSep 30, 2026
- NVIDIA GPU driver: improper input validation in the kernel mode layerMediumSep 30, 2026
- NVIDIA GPU driver: out-of-bounds read in the kernel mode layerMediumSep 30, 2026
- NVIDIA GPU driver: improper array index validation in the kernel mode layerMediumSep 30, 2026
- NVIDIA GPU firmware: out-of-bounds read reachable from a privileged local userMediumSep 30, 2026
- NVIDIA GPU firmware: out-of-bounds write reachable from a privileged local userMediumSep 30, 2026
- NVIDIA vGPU Virtual GPU Manager: incorrect numeric conversion in the kernel mode layerMediumSep 30, 2026
- NVIDIA vGPU Virtual GPU Manager: out-of-bounds read in the kernel mode layerMediumSep 30, 2026
- NVIDIA GPU firmware: improper input validation reachable from a privileged local userMediumSep 30, 2026
- NVIDIA GPU driver for Linux: race condition in the kernel mode layer leads to an out-of-bounds writeMediumSep 30, 2026
- NVIDIA GPU driver: use-after-free in the kernel module, scored as requiring physical accessMediumSep 30, 2026
- NVIDIA GPU secure microcontroller: incorrect permissions let privileged local access modify protected memoryMediumSep 30, 2026
- NVIDIA GPU driver: improper access control in the kernel mode layer allows local denial of serviceMediumSep 30, 2026
- NVIDIA GPU driver for Linux: unprivileged NULL pointer dereferences crash the driverMediumSep 30, 2026
- NVIDIA GPU driver: divide by zero in the kernel mode layer crashes the driverMediumSep 30, 2026
- NVIDIA GPU driver: uninitialized kernel memory is copied back to userspaceMediumSep 30, 2026
- NVIDIA GPU driver for Linux: memory leak in error paths exhausts kernel memoryMediumSep 30, 2026
- NVIDIA Linux GPU driver: tenant can exhaust the DRM VMA offset address space and wedge the GPUMediumSep 30, 2026
- NVIDIA Linux GPU driver: unrate-limited error path lets a local user flood the kernel logMediumSep 30, 2026
- NVIDIA GPU driver: missing authorization lets a local user read another process's GPU channel stateMediumSep 30, 2026
- NVIDIA GPU firmware: null pointer dereference reachable by a privileged local user causes denial of serviceMediumSep 30, 2026
- NVIDIA GPU driver: null pointer dereference in the kernel mode layer causes denial of serviceMediumSep 30, 2026
- NVIDIA Linux GPU driver: unsanitized version string lets a local user inject text into the kernel logMediumSep 30, 2026
Linux drm/virtio: virtio-gpu hands guest-physical addresses to the host on Xen PV, exposing another domain's memoryHighSep 25, 2026- Linux kernel drm/xe: stale GPU data can persist in L1 dataport cache when memory is reclaimedUnscoredSep 25, 2026
- Linux kernel i915: memory leak in the perf config list query on allocation failureUnscoredSep 25, 2026
- Linux kernel drm_exec: empty object array leaves contention unresolved and spins foreverUnscoredSep 25, 2026
- Linux kernel accel/qaic: unbounded response message walk in resp_worker() reads past the slab allocationUnscoredSep 25, 2026
- drm/pagemap: migration error path clears the pages array before DMA-unmapping itHighSep 24, 2026
- Linux amdkfd: use-after-free race when two threads destroy the same compute queueHighSep 24, 2026
- Linux amdkfd: missing bounds check on the CRIU-supplied SDMA queue idHighSep 24, 2026
- Linux amdgpu: unbounded FRU PIA TLV walk reads out of bounds on malformed EEPROM dataHighSep 24, 2026
- Linux kernel amdkfd: unbounded copy_to_user in get_wave_state leaks adjacent kernel memoryHighSep 24, 2026
- Linux kernel amdgpu: use of freed module text when RCU callbacks run after module unloadUnscoredSep 24, 2026
- Linux kernel amdkfd: user-controlled metadata size lets any render-group user force a huge kernel allocationUnscoredSep 24, 2026
- Linux kernel amdgpu: unclamped write position in the vBIOS update sysfs attribute overflows the bufferUnscoredSep 24, 2026
- Linux kernel amdgpu powerplay: pp_table sysfs write memcpys up to PAGE_SIZE into a smaller heap bufferUnscoredSep 24, 2026
- Linux kernel drm/amdgpu: unbounded VBIOS GPIO I2C entry count overruns adev->i2c_bus[]UnscoredSep 24, 2026
- Linux amdgpu: PSP firmware image copied into the 1 MiB private buffer without a size checkUnscoredSep 24, 2026
- Linux amdkfd: caller-supplied doorbell id is not bounds checked in allocate_doorbellUnscoredSep 24, 2026
- Linux amdgpu userq: MQD and firmware buffer objects can be evicted, hanging the GPU nodeUnscoredSep 24, 2026
- Linux drm/xe: NULL dereference when freeing a devcoredump snapshot that was never populatedUnscoredSep 24, 2026
- Linux kernel nouveau/dmem: large-folio migration unmaps PAGE_SIZE instead of the mapped size, leaking IOVAHighSep 16, 2026
- Linux kernel amdkfd: no TLB flush after MES queue eviction lets in-flight DMA touch unmapped GPU memoryHighSep 16, 2026
- nouveau UVMM: failed sparse-unmap bind job frees a live VA region, leading to use-after-freeHighSep 16, 2026
- nouveau: channel-kill event stays subscribed after the fence context is freed, racing teardownHighSep 16, 2026
- drm_pagemap: use-after-put in the device-to-RAM migration error path, plus missing THP fallbackHighSep 16, 2026
- amdkfd: uninitialized return on a hole in the migrated range drops VRAM pages just allocatedHighSep 16, 2026
- amdkfd: device-to-RAM migration error path releases pages by DMA address, corrupting unrelated pagesHighSep 16, 2026
- amdgpu: rings outside a partition index the isolation array out of bounds on SDMA submitHighSep 16, 2026
- drm/ttm: stale restore state after a successful restore leaves shmem handles in the page arrayHighSep 16, 2026
- Linux kernel amdgpu: unvalidated plane degamma LUT size allows divide-by-zero or out-of-bounds readHighSep 16, 2026
- Linux kernel DRM core: race between failed drm_dev_register() and an open ioctl frees device state in useHighSep 16, 2026
- Linux kernel drm/xe: flat CCS storage published as usable VRAM, corrupting allocationsHighSep 16, 2026
- Linux amdgpu VCN: integer overflow in dec_msg buffer count lets the parser run past the message BOHighSep 16, 2026
- Linux amdgpu: resume force-completes an uninitialized UVD ring on SR-IOV virtual functionsUnscoredSep 16, 2026
- Linux kernel nouveau: use-after-free racing the GEM info ioctl against GEM closeUnscoredSep 11, 2026
- Linux kernel amdgpu: recursive reservation lock in devcoredump can self-deadlock the coredump workerUnscoredSep 9, 2026
Imagination Graphics DDK: TOCTOU in guest command validation lets a guest read or write outside its GPU memoryUnscoredSep 4, 2026- Linux kernel amdkfd: unvalidated CRIU-restored IDs reach idr_alloc and can trigger a kernel WARNUnscoredSep 4, 2026
- Linux kernel drm/xe: OA config ioctl leaks sync entries and fence references when the config emit failsUnscoredSep 4, 2026
- Linux drm/amdgpu: UVD H.264 minimum dpb size derived from level rather than the decode messageUnscoredSep 4, 2026
- Linux kernel amdgpu: unvalidated UVD decode message fields overflow the DPB size calculationUnscoredSep 4, 2026
- Linux amdkfd: unchecked CRAT subtype length causes out-of-bounds reads when parsing GPU topologyHighSep 3, 2026
- Linux kernel amdxdna: use-after-free on the IOMMU domain when the accelerator device is removedHighAug 28, 2026
- Linux kernel drm/xe: userptr inject path takes notifier_lock for read, tripping a GPU SVM lock assertionHighAug 28, 2026
- Linux kernel drm/vmwgfx: unvalidated offsets and strides overrun imported dma-buf maps in BO copyHighAug 28, 2026
- Linux kernel drm/vmwgfx: boolean written to guest_memory_size drives out-of-bounds MOB dirty walksHighAug 28, 2026
- Linux kernel amdkfd: double-unpin of doorbell/MMIO buffer objects corrupts TTM pin accountingUnscoredAug 28, 2026
- Linux kernel vmwgfx: unbounded MOB cursor dimensions lead to NULL-pointer oops in the guestUnscoredAug 28, 2026
- Linux kernel amdkfd: any /dev/kfd holder can disable another process's GPU debug sessionUnscoredAug 28, 2026
- Linux kernel drm_gem_shmem: PMD huge-page fault can map past the VMA end and trip VM_BUG_ONHighAug 26, 2026
- Linux kernel amdgpu: duplicate FENCE chunks in one submission leak a buffer-object reference per submitUnscoredAug 26, 2026
- Linux kernel amdgpu UVD: decode image size computed from width instead of pitchUnscoredAug 26, 2026
- Linux kernel amdgpu: unvalidated GEM_CREATE domain combinations hit a BUG_ON and panic the nodeUnscoredAug 26, 2026
- Linux kernel amdgpu display: NULL dereference when vblank is requested on a CRTC with no streamUnscoredAug 26, 2026
- Linux kernel amdgpu: user-supplied indirect buffer size is unbounded, corrupting ring packet fieldsUnscoredAug 26, 2026
- LACT: polkit authorization keyed on peer PID lets a local user bypass authentication to the GPU control daemonHighAug 25, 2026
- Linux kernel drm/xe: memory leak when hang replay state is set twice on an exec queueUnscoredAug 22, 2026
- Linux kernel AMD XDNA driver: unprivileged mmap plus MADV_DONTNEED trips a BUG_ONUnscoredAug 22, 2026
- Linux kernel AMD XDNA driver: error path closes a live VMA and underflows its referencesUnscoredAug 22, 2026
Imagination Graphics DDK: guest VM GPU commands write outside the virtualised GPU memory partitionUnscoredAug 21, 2026- NVIDIA Triton Inference Server: A path traversal scored 9.8 (network, no privileges, fullCriticalAug 18, 2026
- NVIDIA Cumulus Linux: Improper privilege management in the user-management component lets an unprivileged switch userHighAug 18, 2026
- NVIDIA Cumulus Linux - LLDP daemon: Crafted LLDP frames overflow a buffer in the LLDP daemon, reaching code executionHighAug 18, 2026
- NVIDIA Triton Inference Server: Allocation of resources without limits lets an unauthenticated caller exhaustHighAug 18, 2026
- NVIDIA Triton Inference Server: Improper input validation crashes the serverHighAug 18, 2026
- NVIDIA NVOS (network switches): With PKA-only SSH mode enabled, an administrator can inadvertently leave an alternativeHighAug 18, 2026
- NVIDIA Triton Inference Server: An absolute path traversal reaches code execution and information disclosureMediumAug 18, 2026
- NVIDIA Triton Inference Server: An absolute path traversal reachable from a local low-privileged account reaches codeMediumAug 18, 2026
- Linux kernel drm/vmwgfx: undersized DMA command lets one command rewrite another's verified fieldsHighAug 15, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): An out-of-bounds access in the amdgpu RAS / GPUHighAug 15, 2026
- Linux kernel vmwgfx: undersized DRAW_PRIMITIVES header wraps the bound into an out-of-bounds readHighAug 15, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighAug 15, 2026
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A use-after-free in the amdgpu power managementHighAug 15, 2026
- Linux kernel vmwgfx: surface array_size taken from userspace without a shader-model boundHighAug 12, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/gfx8): A correctness defect in the amdgpu RAS / GPUUnscoredAug 12, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)UnscoredAug 12, 2026
- Intel Gaudi / vLLM hardware plugin: Malformed input to the Gaudi vLLM plugin crashes or wedges the serving processMediumAug 11, 2026
- Intel Gaudi / gaudi-container-runtime: A path-traversal bug in the container runtime shim that wires Gaudi devices intoMediumAug 11, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn4): A correctness defect in the amdgpuHighAug 10, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vce): An out-of-bounds access in the amdgpuHighAug 10, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A NULL pointer dereference in the amdgpu kernel driver coreHighAug 10, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A division by zero in the amdgpu firmwareHighAug 10, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A use-after-free in the amdgpu display core (DC/DM)HighAug 10, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A use-after-free in the amdgpuHighAug 10, 2026
- Linux kernel drm/i915: HDCP stream array bounds check ran after the overflowing writeHighAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A use-after-free in the amdgpu RAS / GPU reset andHighAug 10, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu): A correctness defect in the amdgpuHighAug 10, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A memory or reference-count leakUnscoredAug 10, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): Missing or insufficient validation ofUnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/sdma7.1): A correctness defect in the amdgpu RAS /UnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/sdma4.4.2): A correctness defect in the amdgpu RAS /UnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/gfx9): A correctness defect in the amdgpu RAS / GPUUnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/gfx9.4.3): A correctness defect in the amdgpu RAS /UnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/gfx12): A correctness defect in the amdgpu RAS / GPUUnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/gfx12.1): A correctness defect in the amdgpu RAS /UnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/gfx10): A correctness defect in the amdgpu RAS / GPUUnscoredAug 10, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A memory or reference-count leakUnscoredAug 10, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)UnscoredAug 10, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu/userq): A race condition or locking defectUnscoredAug 10, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A memory or reference-count leakUnscoredAug 10, 2026
- Linux kernel i915: siblings[] array leaked when a later context-creation extension failsUnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/gfx11): A correctness defect in the amdgpu RAS / GPUUnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/sdma5.0): A correctness defect in the amdgpu RAS /UnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/sdma5.2): A correctness defect in the amdgpu RAS /UnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/sdma6.0): A correctness defect in the amdgpu RAS /UnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/sdma7.0): A correctness defect in the amdgpu RAS /UnscoredAug 10, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreUnscoredAug 10, 2026
- Linux kernel i915: userspace-controlled parallel submit slot index lacks a Spectre-v1 nospec guardUnscoredAug 10, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): Missing or insufficient validation ofUnscoredAug 10, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A NULL pointer dereference in the amdgpuUnscoredAug 10, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/gfx): An out-of-bounds access in the amdgpuUnscoredAug 10, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A race condition or locking defect in the amdgpu displayUnscoredAug 10, 2026
Imagination Graphics DDK: GPU firmware boots using a save/restore pointer the non-secure kernel can rewriteHighAug 7, 2026- NVIDIA Dynamo: Unauthenticated remote code executionCriticalAug 4, 2026
- NVIDIA Dynamo: RCE via buffer overflow in tensor shape validationHighAug 4, 2026
- NVIDIA Dynamo: Deserialization of untrusted data in Dynamo reaches denial of service and data tamperingHighAug 4, 2026
- NVIDIA Dynamo: MITM via improper TLS certificate verificationHighAug 4, 2026
- NVIDIA Dynamo: Arbitrary file access via path traversalHighAug 4, 2026
- NVIDIA Dynamo: SSRF via URL handlingHighAug 4, 2026
- NVIDIA Dynamo: SSRF in remote resource loadingHighAug 4, 2026
- NVIDIA Dynamo: SSRF in model fetchingHighAug 4, 2026
- NVIDIA Dynamo: SSRF in data retrievalHighAug 4, 2026
- NVIDIA Dynamo: SSRF in API communicationHighAug 4, 2026
- NVIDIA Dynamo: SSRF in external service communicationHighAug 4, 2026
- NVIDIA Dynamo: Improper access control on privileged operationsMediumAug 4, 2026
- NVIDIA Dynamo: DoS / corruption via race in resource syncMediumAug 4, 2026
- NVIDIA Dynamo: TOCTOU raceMediumAug 4, 2026
- NVIDIA Dynamo: Error messages from Dynamo leak sensitive information to an unauthenticated network callerMediumAug 4, 2026
- Triton Inference Server: Path traversal in model file operationsMediumAug 4, 2026
- DCGM: DoS of the GPU telemetry/health daemon (resource exhaustion)HighJul 28, 2026
- NVIDIA NeMo Framework: OS command injection reaches code execution with the job's privilegesHighJul 27, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vce1): An out-of-bounds access in the amdgpuHighJul 25, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJul 24, 2026
- Transformers4Rec: Code exec via insecure deserialization in the pipelineMediumJul 21, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): Memory is handed to a consumer without beingHighJul 19, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu/vce): A correctness defect in the amdgpu kernel driver coreHighJul 19, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu/jpeg): A correctness defect in the amdgpu kernel driver coreHighJul 19, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/jpeg): A correctness defect in the amdgpu RAS / GPUHighJul 19, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu/jpeg): A correctness defect in the amdgpu kernel driver coreHighJul 19, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu/jpeg): A correctness defect in the amdgpu kernel driver coreHighJul 19, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu/jpeg): A correctness defect in the amdgpu kernel driver coreHighJul 19, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu/jpeg): A correctness defect in the amdgpu kernel driver coreHighJul 19, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu/jpeg): A correctness defect in the amdgpu kernel driver coreHighJul 19, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu/jpeg): A correctness defect in the amdgpu kernel driver coreHighJul 19, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu/jpeg): A correctness defect in the amdgpu kernel driver coreHighJul 19, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn): A correctness defect in the amdgpuHighJul 19, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn): A correctness defect in the amdgpuHighJul 19, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn): A correctness defect in the amdgpuHighJul 19, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn): A correctness defect in the amdgpuHighJul 19, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn): A correctness defect in the amdgpuHighJul 19, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn): A correctness defect in the amdgpuHighJul 19, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn): A correctness defect in the amdgpuHighJul 19, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn): A correctness defect in the amdgpuHighJul 19, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A correctness defect in the amdgpuHighJul 19, 2026
- Linux kernel qaic: oversized buffer object remaps past the VMA, leaving mappings that survive munmapHighJul 19, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJul 19, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): Missing or insufficient validation ofUnscoredJul 19, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): Missing or insufficient validation ofUnscoredJul 19, 2026
- TensorRT-LLM: RCE via unsafe deserializationHighJul 14, 2026
- TensorRT: Info disclosure / code exec (OOB read in tensor parsing)HighJul 14, 2026
- TensorRT: Code exec (OOB write in tensor manipulation)HighJul 14, 2026
- TensorRT: Code exec (buffer overflow in tensor dimension handling)HighJul 14, 2026
- TensorRT-LLM: RCE via insecure deserialization on model loadHighJul 14, 2026
- TensorRT-LLM: RCE potential (OOB write in tensor manipulation)HighJul 14, 2026
- Triton Inference Server: DoS via resource exhaustionHighJul 14, 2026
- Triton Inference Server: DoS via stack overflow in recursive processingHighJul 14, 2026
- Triton Inference Server: DoS via memory leak (improper resource cleanup)HighJul 14, 2026
- Triton Inference Server: DoS via allocation-request resource exhaustionHighJul 14, 2026
- Triton Inference Server: DoS via unchecked exceptionHighJul 14, 2026
- Triton Inference Server: DoS via resource leak in error pathsHighJul 14, 2026
- TensorRT-LLM: Memory corruption (improper array bounds checking)HighJul 14, 2026
- TensorRT-LLM: Missing authentication in authorization checksHighJul 14, 2026
- TensorRT-LLM: SSRF via plugin loadingMediumJul 14, 2026
- Triton Inference Server: MITM via weak TLS verificationMediumJul 14, 2026
- TensorRT-LLM: Code exec via insecure deserialization on model loadMediumJul 14, 2026
- TensorRT-LLM: Missing authentication in configuration processingMediumJul 14, 2026
- TensorRT-LLM: Unsafe external file loadingMediumJul 14, 2026
- TensorRT-LLM: DoS via large tensor allocationMediumJul 14, 2026
- TensorRT-LLM: DoS / memory corruption (insufficient tensor validation)MediumJul 14, 2026
- TensorRT-LLM: DoS via assertion failureMediumJul 14, 2026
- TensorRT: DoS via resource exhaustionMediumJul 14, 2026
- NVIDIA AIStore: Missing authentication on API endpointsCriticalJul 1, 2026
- Container Toolkit: Container escape to host root via TOCTOU raceHighJul 1, 2026
- Megatron-Bridge: RCE via unsafe deserialization of untrusted model and config artifactsHighJul 1, 2026
- Megatron-Bridge: SSRF in file operationsHighJul 1, 2026
- Megatron-Bridge: Validation bypass via incorrect type comparisonHighJul 1, 2026
- Megatron-Bridge: RCE via unsafe evaluation of loaded configHighJul 1, 2026
- NeMo Framework: Command injection in script processingHighJul 1, 2026
- Triton Inference Server: DoS via improper exception handlingHighJul 1, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJul 1, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJul 1, 2026
- Triton Inference Server: Use-after-free in request processingMediumJul 1, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumJun 26, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A race condition or locking defectMediumJun 26, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumJun 26, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amd/ras): A NULL pointer dereference in the amdgpu RAS / GPUMediumJun 26, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amd/ras): A NULL pointer dereference in the amdgpu RAS / GPUMediumJun 26, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJun 25, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJun 25, 2026
- Linux accel/ivpu: signed truncation of firmware data_size overflows a stack buffer on IPC receiveHighJun 25, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJun 25, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumJun 25, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu): A double free in the amdgpu user-modeHighJun 24, 2026
- NeMo Framework: RCE via malicious YAML deserializationHighJun 16, 2026
- NeMo Framework: RCE via unsafe object deserializationHighJun 16, 2026
- NVIDIA DALI: Code exec via OOB write on malformed tensor dimsHighJun 9, 2026
- NVIDIA DALI: Code exec via buffer overflowHighJun 9, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu/userq): A correctness defect in the amdgpuHighJun 8, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): Memory is handed to a consumer without beingMediumJun 8, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJun 3, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumJun 3, 2026
- NVTabular: RCE via unsafe pickle deserializationHighJun 2, 2026
- NVTabular: RCE via insecure deserialization in data processingHighJun 2, 2026
- AI Tensor Engine for ROCm (AITER) - MessageQueue.recv() in shm_broadcast.py: AITER's MessageQueue.recv() deserialisesHighJun 1, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn4): An out-of-bounds access in the amdgpuHighMay 28, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn4): An out-of-bounds access in the amdgpuHighMay 28, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): An out-of-bounds access in the amdgpuHighMay 28, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn3): An out-of-bounds access in the amdgpuHighMay 28, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu/sdma4): A correctness defect in the amdgpuMediumMay 28, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A correctness defect in the amdgpuHighMay 27, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A memory or reference-count leakMediumMay 27, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A memory or reference-count leak in the amdgpu RASMediumMay 27, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A correctness defect in the amdgpuMediumMay 27, 2026
- GPU Display Driver: Local privesc to host root (use-after-free in context handling)HighMay 26, 2026
- NVIDIA Merlin Transformers4Rec: Improper deserialization of untrusted data reaches code execution and informationHighMay 26, 2026
- GPU Display Driver: Local privesc (insufficient permission checks)HighMay 26, 2026
- GPU Display Driver: Local privesc (synchronization issue)HighMay 26, 2026
- GPU Display Driver: Local privesc (integer overflow in address calc)HighMay 26, 2026
- GPU Display Driver: Local privesc (buffer overflow in GPU command processing)HighMay 26, 2026
- GPU Display Driver / GPU firmware: Local privesc via improper GPU firmware parameter validationHighMay 26, 2026
- Isaac Launchable: Info disclosure (unencrypted sensitive data in transit)HighMay 26, 2026
- vGPU Manager: Guest-to-host impact via invalid guest-driver inputHighMay 26, 2026
- GPU Display Driver: Info disclosure (OOB read of graphics memory)HighMay 26, 2026
- vGPU Manager: Guest-to-host escape (use-after-free in GPU context mgmt)HighMay 26, 2026
- GPU Display Driver: DoS / privesc (race in GPU memory management)MediumMay 26, 2026
- GPU Display Driver: Cross-tenant info disclosure via GPU memory leakageMediumMay 26, 2026
- vGPU Manager: Host impact via GPU command-buffer overflowMediumMay 26, 2026
- GPU Display Driver: Improper access control in driver operationsMediumMay 26, 2026
- GPU Display Driver: DoS (race in GPU resource allocation)MediumMay 26, 2026
- Triton Inference Server: Missing authenticationCriticalMay 20, 2026
- BioNeMo Framework: Arbitrary file read/write via path traversalHighMay 20, 2026
- NVIDIA TensorRT: An out-of-bounds write reachable from the network reaches data tampering, scored 8.2 with noHighMay 20, 2026
- DGX Spark: Hardcoded credentials in configHighMay 20, 2026
- Triton Inference Server: Info disclosure / RCE (OOB read in tensor processing)HighMay 20, 2026
- Triton Inference Server: RCE (integer overflow in model config parsing)HighMay 20, 2026
- BioNeMo Framework: RCE via insecure deserialization on model loadHighMay 20, 2026
- TensorRT-LLM: RCE via insecure config deserializationHighMay 20, 2026
- Triton Inference Server: Arbitrary file access via unsafe path operationsHighMay 20, 2026
- Triton Inference Server: DoS / memory corruption (integer overflow in buffer allocation)HighMay 20, 2026
- Triton Inference Server: Weak authenticationHighMay 20, 2026
- TensorRT-LLM: Code exec via insecure deserializationMediumMay 20, 2026
- Triton Inference Server: DoS via connection floodingMediumMay 20, 2026
- TensorRT-LLM: DoS (null deref in tensor ops)MediumMay 20, 2026
- Triton Inference Server: Info disclosure via path traversal on model filesMediumMay 20, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A use-after-free in the amdgpu firmwareHighMay 8, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amdgpu): A race condition or locking defect in the amdgpu display coreMediumMay 8, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A race condition or locking defect in the amdgpu displayMediumMay 8, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amdgpu): A correctness defect in the amdgpu display core (DC/DM)MediumMay 8, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumMay 8, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumMay 8, 2026
- Linux kernel amdgpu kernel driver core (drm/amd): A NULL pointer dereference in the amdgpu kernel driver coreMediumMay 8, 2026
- Linux kernel amdgpu kernel driver core (drm/amd): A NULL pointer dereference in the amdgpu kernel driver coreMediumMay 8, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu): Missing or insufficient validation ofMediumMay 8, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu/userq): A memory or reference-count leakMediumMay 8, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu): Missing or insufficient validation ofMediumMay 8, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A use-after-free in the amdgpuHighMay 6, 2026
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A NULL pointer dereference in the amdgpu powerMediumMay 6, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumMay 6, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu): Missing or insufficient validation ofMediumMay 6, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumMay 6, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu): An out-of-bounds access in the amdgpuHighMay 1, 2026
- Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdgpu): A NULL pointer dereference in the amdkfd (KFD computeMediumMay 1, 2026
- NVIDIA FLARE SDK: Unauthenticated remote code executionCriticalApr 28, 2026
- NVIDIA FLARE SDK: RCE via unsafe deserialization in message handlingHighApr 28, 2026
- NemoClaw: Sensitive info exposure in logsHighApr 28, 2026
- NVIDIA FLARE SDK: Auth bypass via insufficient input validationMediumApr 28, 2026
- NemoClaw: SSRFMediumApr 28, 2026
- Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdgpu): A use-after-free in the amdkfd (KFD compute driverHighApr 24, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A use-after-free in the amdgpu display core (DC/DM)HighApr 22, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumApr 22, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreMediumApr 22, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A correctness defect in the amdgpu kernel driver core reachableMediumApr 22, 2026
- NVIDIA CUDA-Q: Info disclosure / code exec (OOB read in circuit compilation)HighApr 21, 2026
- KAI Scheduler: Missing authentication on API endpointsHighApr 21, 2026
- KAI Scheduler: Improper access control in resource allocation (cross-tenant quota abuse)MediumApr 21, 2026
- Triton Inference Server: DoS via memory exhaustion on malformed inputHighApr 7, 2026
- NVIDIA Triton Inference Server: A malformed request crashes the server outrightHighApr 7, 2026
- NVIDIA Triton Inference Server: A second malformed-request crash pathHighApr 7, 2026
- NVIDIA Triton Inference Server: A malformed request header crashes the server before the body is even parsedHighApr 7, 2026
- NVIDIA DALI: RCE via unsafe deserializationHighApr 7, 2026
- Triton Inference Server: Unauthorized file access via path traversalMediumApr 7, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): An out-of-bounds access in the amdgpuMediumApr 3, 2026
- BioNeMo Framework: Remote RCE via untrusted serializationHighMar 31, 2026
- Jetson Xavier / Orin: Authentication bypass in a network serviceHighMar 31, 2026
- BioNeMo Framework: RCE via malicious pickled dataHighMar 31, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu/userq): A race condition or locking defectMediumMar 25, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): Memory is handed to a consumer without beingMediumMar 25, 2026
- NVIDIA Model Optimizer: RCE via unsafe deserializationHighMar 24, 2026
- NVIDIA Megatron-LM: Checkpoint loading reaches remote code execution when a user loads a crafted checkpointHighMar 24, 2026
- NVIDIA Megatron-LM: The inferencing path reaches remote code execution on crafted inputHighMar 24, 2026
- NVIDIA Megatron-LM: A second checkpoint-loading remote code execution pathHighMar 24, 2026
- NeMo Framework: unsafe deserialization of untrusted model data allows remote code executionHighMar 24, 2026
- NVIDIA Triton Inference Server: A large compressed payload - a decompression bomb against the HTTP endpointHighMar 24, 2026
- NVIDIA License System - Delegated Licensing Service (DLS): Improper authentication in the DLS lets an unauthenticatedMediumFeb 24, 2026
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A correctness defect in the amdgpu power managementMediumFeb 18, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A NULL pointer dereference in the amdgpuMediumFeb 14, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A NULL pointer dereference in the amdgpuUnscoredFeb 4, 2026
- NVIDIA Megatron-LM: A further script-level code-injection path, filed under the same class as the 2025 setHighFeb 3, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu/userq): A memory or reference-count leakUnscoredJan 31, 2026
- NVIDIA GEN3C (Spatial Intelligence Lab) inference API server: The inference API server runs Python pickle.loads()Critical2026
- NVIDIA BlueField - VIRTIO-Net emulation: A VM user sends a crafted message to the BlueField VIRTIO-Net device and getsCritical2026
- NVIDIA/Mellanox ConnectX driver (mlx5_ib user access region index release): The driver released the software-side UARHigh2026
- NVIDIA Jetson Linux (initrd command-line handling): An attacker with physical access and no credentials at all canHigh2026
- NVIDIA/Mellanox ConnectX driver (mlx5_ib DEVX subscribe-event unwind): DEVX is the raw device-command escape hatch thatHigh2026
- NVIDIA TensorRT-LLM: Concurrent requests race inside TensorRT-LLM and reach data tampering with a changed scope. On aMedium2026
- NVIDIA Jetson Linux (initrd, nvluks trusted application): The nvluks trusted application is left enabled after initrdMedium2026
2025243
- BlueField (GA firmware): out-of-bounds write in the VF command interface allows code execution on the DPUCriticalJul 1, 2026
- GPU Display Driver: DoS (input validation)MediumMay 26, 2026
- TensorRT-LLM: Privesc via unsafe deserializationHighMay 20, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/ras): A NULL pointer dereference in the amdgpu RAS /MediumMay 6, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A NULL pointer dereference in the amdgpuMediumMay 6, 2026
- AMD Platform Configuration Blob (APCB) SMM driver, EPYC and Instinct MI300A/MI300C: Incorrect use of the UEFIHighApr 16, 2026
- Apex: Remote RCE via unsafe pickle deserializationCriticalMar 24, 2026
- Megatron-LM: Local privesc / RCE via unsafe pickle deserializationHighMar 24, 2026
- Megatron-LM: RCE via insecure deserializationHighMar 24, 2026
- Triton Inference Server: concurrent requests trigger a race condition that crashes the server (remote DoS)HighMar 24, 2026
- SNAP-4 container (BlueField storage): DoS of the storage dataplaneMediumMar 24, 2026
- SNAP-4 container: DoS (integer overflow)MediumMar 24, 2026
- HGX / DGX B300: Authentication bypass in the hardware management interfaceMediumMar 24, 2026
- Cumulus Linux / NVOS: Privesc to switch adminHighFeb 24, 2026
- Cumulus Linux / NVOS: Command injectionHighFeb 24, 2026
- Cumulus Linux / NVOS: Command injection (local)HighFeb 24, 2026
- NeMo Framework: Remote RCE via insecure deserialization over the networkHighFeb 18, 2026
- NeMo Framework: Arbitrary Python code exec via code injectionHighFeb 18, 2026
- Megatron-Bridge: code injection via malicious input in the data merging and data shuffling tutorialsHighFeb 18, 2026
- NeMo Framework: Unsafe deserialization of untrusted model/config data allows arbitrary code executionHighFeb 18, 2026
- NeMo Framework: Local command injection via unsanitized input passed to shell executionHighFeb 18, 2026
- GPU Display Driver: Local privesc to host root (use-after-free)HighJan 28, 2026
- GPU Display Driver: Kernel mode layer integer overflows allow local privilege escalationHighJan 28, 2026
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): A malicious guest causes the VirtualHighJan 28, 2026
- GPU Display Driver: DoS (null deref)MediumJan 28, 2026
- NVIDIA runx: Arbitrary command exec via shell metacharacter injectionHighJan 27, 2026
- Merlin Transformers4Rec: RCE via unsanitized inputHighJan 20, 2026
- CUDA Toolkit: Local privilege escalation via command injection in toolkit utilitiesHighJan 20, 2026
- CUDA Toolkit: Code exec via untrusted library loadHighJan 20, 2026
- CUDA Toolkit: Code exec via path manipulation on library loadMediumJan 20, 2026
- Nsight Graphics: Local code exec via command injectionHighJan 14, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A use-after-free in the amdgpu RAS / GPU reset andHighJan 13, 2026
- NVIDIA Isaac Launchable: Hard-coded credentials in Isaac Launchable give an unauthenticated network attacker codeCriticalDec 23, 2025
- NVIDIA Isaac Launchable: Execution with unnecessary privileges lets an unauthenticated network attacker reach codeCriticalDec 23, 2025
- NVIDIA Isaac Launchable: A second over-privileged execution path with the same unauthenticated network reach and 9.8CriticalDec 23, 2025
- NVIDIA Isaac Lab: A deserialization flaw reaches code executionCriticalDec 16, 2025
- NVIDIA Resiliency Extension: Predictable log-file names in the log-aggregation path let an attacker pre-createHighDec 16, 2025
- NVIDIA NeMo Framework: Crafted data reaches code injection and privilege escalation in the job contextHighDec 16, 2025
- NVIDIA Resiliency Extension: A race condition in the checkpointing core reaches information disclosure, data tamperingHighDec 16, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreHighDec 16, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighDec 16, 2025
- NVIDIA NeMo Framework: Loading a maliciously crafted model file bypasses the framework's control mechanisms and reachesHighDec 16, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreUnscoredDec 16, 2025
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/atom): A NULL pointer dereferenceUnscoredDec 16, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)UnscoredDec 16, 2025
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A correctness defect in the amdgpu kernel driver core reachableUnscoredDec 16, 2025
- Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdgpu): An out-of-bounds access in the amdkfd (KFD computeUnscoredDec 16, 2025
- NVIDIA Merlin Transformers4Rec: The Trainer component deserializes untrusted data, reaching code executionHighDec 9, 2025
- NVIDIA NVTabular: The Workflow component deserializes untrusted data, reaching code executionHighDec 9, 2025
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu): Missing or insufficient validation ofHighDec 9, 2025
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu): Missing or insufficient validation ofUnscoredDec 9, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A NULL pointer dereference in the amdgpuUnscoredDec 9, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): Memory is handed to a consumer without beingUnscoredDec 6, 2025
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A correctness defect in the amdgpu RAS / GPU resetUnscoredDec 6, 2025
- NVIDIA TAO Toolkit: An uncontrolled search path loads an attacker-planted resource, reaching privilege escalationHighDec 3, 2025
- NVIDIA Triton Inference Server: Extra-large payloads trigger an improper-exceptional-condition check and crashHighDec 3, 2025
- NVIDIA Triton Inference Server: Improper validation of a specified quantity in input crashes the serverHighDec 3, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: An attacker with privileged access reachesCriticalNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: An attacker tampers with hardware controls directlyHighNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: An out-of-bounds write in SROOT firmware reaches codeHighNov 25, 2025
- NVIDIA NeMo Framework: Crafted data in the NLP and LLM components injects codeHighNov 25, 2025
- NVIDIA NeMo Agent Toolkit (Web UI): The chat API endpoint is vulnerable to server-side request forgery, so an attackerHighNov 25, 2025
- NVIDIA NeMo Framework: A predefined variable pulls in functionality from an untrusted control sphere, reaching codeHighNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: A second out-of-bounds write in SROOT firmwareMediumNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: An invalid memory read in OSROOT firmware crashesMediumNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: An arbitrary memory read in SROOT firmware givesMediumNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: SROOT firmware validates integrity improperly, leakingMediumNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: Improper input processing in SROOT firmware yieldsMediumNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: Unexpected memory buffer operations in SROOT firmwareMediumNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: SROOT firmware reuses a resource without clearingMediumNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: A null-pointer dereference in SROOT firmware crashesMediumNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: A second resource-reuse path in SROOT firmware leaksLowNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: Incorrect control-flow behaviour in SROOT firmwareLowNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: A third resource-reuse path in SROOT firmware leaksLowNov 25, 2025
- NVIDIA Isaac-GR00T N1.5: A Python component injects code from crafted inputHighNov 18, 2025
- NVIDIA Isaac-GR00T N1.5: A second Python code-injection path in the same releaseHighNov 18, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreUnscoredNov 12, 2025
- NVIDIA AIStore - AuthN: A flaw in the AIStore authentication component reaches privilege escalation, informationHighNov 11, 2025
- NVIDIA Megatron-LM: A script in the repository injects code from crafted dataHighNov 11, 2025
- NVIDIA NeMo Framework: Malicious input causes improper control of code generation, reaching code executionHighNov 11, 2025
- NVIDIA NeMo Framework: Crafted data in the BERT services component injects codeHighNov 11, 2025
- NVIDIA Triton Inference Server: Extra-large payloads cause a stack overflow and kill the serverHighNov 11, 2025
- Intel Gaudi software suite (SynapseAI stack): An authenticated local user can drive the Gaudi software stackMediumNov 11, 2025
- NVIDIA AIStore - AuthN: An unauthenticated user extracts information from the AIStore authentication componentMediumNov 11, 2025
- NVIDIA Run:ai: Improper restriction of communication channels lets an attacker on an adjacent network reachMediumNov 4, 2025
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): A malicious guest drives the VirtualHighOct 23, 2025
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): Allocating a specific GPU memory resource drivesMediumOct 23, 2025
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): A null-pointer dereference in the Linux display driverMediumOct 23, 2025
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): A null-pointer dereference in a Linux driver kernelMediumOct 23, 2025
- NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): An out-of-bounds read in theMediumOct 23, 2025
- NVIDIA ConnectX / BlueField: Privilege escalation leading to arbitrary code execution via the management interfaceMediumOct 22, 2025
- NVIDIA Isaac Lab (Isaac Sim): SB3 configuration parsing reaches code execution with no privileges and no userHighOct 14, 2025
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An uncontrolled DLL loading path in the displayHighOct 10, 2025
- GPU Display Driver: Local privesc (use-after-free)HighOct 10, 2025
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): A race condition in the Linux display driver is winnableHighOct 10, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreHighOct 1, 2025
- NVIDIA License System - Delegated Licensing Service (DLS): An unauthorised action against the DLS reaches highHighSep 30, 2025
- NVIDIA License System - Delegated Licensing Service (DLS): SQL injection in the DLS appliance reaching a high integrityMediumSep 30, 2025
- NVIDIA License System - Delegated Licensing Service (DLS): An authorised-looking action leads to information disclosureLowSep 30, 2025
- NVIDIA Megatron-LM: crafted input files execute attacker code in training and evaluation scriptsHighSep 24, 2025
- CUDA Toolkit: Info disclosure / DoS (buffer over-read)MediumSep 24, 2025
- CUDA Toolkit: Info disclosure (buffer over-read)MediumSep 24, 2025
- CUDA Toolkit: Code exec potential (buffer overflow)MediumSep 24, 2025
- NVIDIA CUDA Toolkit - nvdisasm: out-of-bounds read on a malformed ELF crashes the disassemblerLowSep 24, 2025
- NVIDIA CUDA Toolkit - cuobjdump: An out-of-bounds read on a malformed ELF crashes the toolLowSep 24, 2025
- CUDA Toolkit: Info disclosure (buffer over-read)LowSep 24, 2025
- NVIDIA CUDA Toolkit - nvdisasm: A heap-based buffer overflow on a malicious ELF gives arbitrary code executionLowSep 24, 2025
- NVIDIA CUDA Toolkit - nvdisasm: An out-of-bounds write on a malicious ELF crashes the tool and corrupts heap stateLowSep 24, 2025
- NVIDIA CUDA Toolkit - cuobjdump: A stack-based buffer overflow on a malicious ELF gives arbitrary code executionLowSep 24, 2025
- NVIDIA CUDA Toolkit - cuobjdump: A null-pointer dereference from an unprivileged user crashes the toolLowSep 24, 2025
- CUDA Toolkit: DoS (division by zero)LowSep 24, 2025
- Triton Inference Server: RCE / privesc via input-validation failureHighSep 17, 2025
- NVIDIA Triton Inference Server: Crafted input causes an out-of-bounds write in the serverHighSep 17, 2025
- NVIDIA Triton Inference Server: An attacker who can locate and reach the Python backend's shared memory region corruptsHighSep 17, 2025
- HGX / DGX GB200, GB300, B300 (BMC -> HMC): BMC admin can pivot to the HMC as administratorMediumSep 17, 2025
- NVIDIA Triton Inference Server: Loading a misconfigured model causes a denial of serviceMediumSep 17, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumSep 11, 2025
- NVIDIA NVDebug tool: The NVDebug diagnostic collector lets an actor gain access to a privileged account, reaching codeHighSep 9, 2025
- NVIDIA NVDebug tool: NVDebug can be induced to write files into restricted components, reaching data tamperingHighSep 9, 2025
- NVIDIA NVDebug tool: NVDebug allows an actor to run code on the platform host as a non-privileged user, reaching codeHighSep 9, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumSep 5, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumSep 5, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumSep 5, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amdgpu): A NULL pointer dereference in the amdgpu display core (DC/DM)MediumSep 5, 2025
- BlueField DPU: Access-control bypass on the DPUHighSep 4, 2025
- habanalabs kernel driver (dma-buf export path): A use-after-free in the habanalabs dma-buf export path: the driverHighSep 4, 2025
- NVIDIA DOCA: Local privesc via insecure file permissionsHighSep 4, 2025
- NVIDIA DOCA: Local privesc via insecure file permissionsHighSep 4, 2025
- Mellanox DPDK: DoS / data tampering via race conditionMediumSep 4, 2025
- ConnectX: Access-control flaw in NIC firmwareMediumSep 4, 2025
- Cumulus Linux: Sensitive data exposure on the switchMediumSep 4, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A NULL pointer dereference in the amdgpu powerMediumSep 4, 2025
- NVIDIA HGX / DGX (Hopper and Blackwell) - GPU VBIOS: A VBIOS misconfiguration lets an attacker set an unsafe GPU debugMediumSep 4, 2025
- NVIDIA HGX / DGX (Hopper and Blackwell) - NVSwitch LS10 firmware: A misconfiguration of the LS10 NVSwitch lets anMediumSep 4, 2025
- NVIDIA NeMo Curator: A malicious file processed by the data-curation pipeline injects codeHighAug 26, 2025
- NVIDIA NeMo Framework: Crafted data in the retrieval-services component injects code into the running jobHighAug 26, 2025
- NVIDIA NeMo Framework: crafted data in the NLP component injects code into the running job (CWE-94)HighAug 26, 2025
- NVIDIA NeMo Framework: Crafted data in the export-and-deploy component injects codeHighAug 26, 2025
- Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdgpu): A use-after-free in the amdkfd (KFD compute driverHighAug 19, 2025
- NVIDIA WebDataset: Arbitrary code execution with elevated permissions from the data-loading libraryHighAug 13, 2025
- NVIDIA Apex: A Python component injects code from a malicious fileHighAug 13, 2025
- NVIDIA Isaac-GR00T N1: A Python component injects code from crafted input into the robotics-model pipelineHighAug 13, 2025
- NVIDIA Merlin Transformers4Rec: A Python dependency permits code injection into the recommender training jobHighAug 13, 2025
- NVIDIA NeMo Framework: Deserialization of untrusted data reaches remote code execution when a crafted artifactHighAug 13, 2025
- NVIDIA NeMo Framework: Loading a .nemo file with crafted metadata injects code at model-load timeHighAug 13, 2025
- NVIDIA Megatron-LM: A code-injection flaw in the tools component executes attacker-controlled code inside the trainingHighAug 13, 2025
- NVIDIA Megatron-LM: megatron/training/arguments.py injects code from malicious inputHighAug 13, 2025
- NVIDIA Triton Inference Server: An invalid request triggers a divide-by-zero and kills the server processHighAug 6, 2025
- NVIDIA Triton Inference Server: Cancelling a stream before it is processed causes a double free and crashes the serverHighAug 6, 2025
- NVIDIA Triton Inference Server: An integer overflow on an invalid request leads to a segmentation faultHighAug 6, 2025
- NVIDIA Triton Inference Server: A second integer-overflow-to-segfault path on invalid requestsHighAug 6, 2025
- NVIDIA Triton Inference Server: Crafted input drives uncontrolled recursion and exhausts the stackHighAug 6, 2025
- NVIDIA Triton Inference Server: Crafted input causes an integer overflow and crashes the serverHighAug 6, 2025
- NVIDIA Triton Inference Server: Crafted input causes an integer overflow that reaches data tampering as well as denialHighAug 6, 2025
- NVIDIA Triton Inference Server: An invalid request drives an excessive memory allocation and a segmentation faultHighAug 6, 2025
- NVIDIA Triton Inference Server: Manipulating the Python backend's shared memory region produces an out-of-bounds readMediumAug 6, 2025
- NVIDIA Triton Inference Server: A crafted request causes an out-of-bounds read in the Python backend, disclosing memoryMediumAug 6, 2025
- NVIDIA Triton Inference Server: A specific model configuration plus a specific input causes an underflowMediumAug 6, 2025
- GPU Display Driver: Local privesc via file permissionsHighAug 2, 2025
- vGPU Manager: Guest-to-host escape (stack buffer overflow)HighAug 2, 2025
- vGPU Manager: Guest-to-host escape (stack buffer overflow)HighAug 2, 2025
- GPU Display Driver: Access-control bypassHighAug 2, 2025
- GPU Display Driver: Local privesc (OOB write)HighAug 2, 2025
- GPU Display Driver: Local privesc (race condition)HighAug 2, 2025
- GPU Display Driver: Local privesc (use-after-free)HighAug 2, 2025
- vGPU Manager: Local privesc via file permissionsMediumAug 2, 2025
- GPU Display Driver: Info disclosure (buffer over-read)MediumAug 2, 2025
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An attacker with local access reads sensitiveLowAug 2, 2025
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): Local unprivileged access to the Windows displayLowAug 2, 2025
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): A guest can read global GPU metricsLowAug 2, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreHighJul 25, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumJul 25, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumJul 25, 2025
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A correctness defect in the amdgpu RAS / GPU resetMediumJul 25, 2025
- Container Toolkit: Container escape to host root via malicious image (LD_PRELOAD in OCI hook)CriticalJul 17, 2025
- Container Toolkit: Container escape / host file write via symlink followingHighJul 17, 2025
- Mellanox OFED: Authentication bypass in the host networking stackHighJul 17, 2025
- IGX Orin / Jetson (power mgmt): DoS / hardware damage via power-management abuseHighJul 17, 2025
- Jetson Xavier / Orin: Info disclosure via side channelMediumJul 17, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pp): A NULL pointer dereference in the amdgpu powerMediumJul 10, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumJul 9, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)MediumJul 4, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighJul 3, 2025
- NVIDIA BlueField (mlx5 ECVF): Use-after-free during ECVF vport unload in the mlx5 driverHighJul 3, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighJul 2, 2025
- Megatron-LM: Arbitrary code execution in the training jobHighJun 24, 2025
- Megatron-LM: Arbitrary code executionHighJun 24, 2025
- AIS Operator (AIStore): Improper access control on cluster storageMediumJun 24, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJun 18, 2025
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A memory or reference-count leak in the amdgpu kernel driver coreMediumJun 18, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumJun 18, 2025
- NVDebug tool: Info disclosure / privesc via diagnostic toolMediumJun 18, 2025
- CUDA Toolkit: DoS via malformed string parsingMediumMay 27, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A use-after-free in the amdgpu display core (DC/DM)HighMay 20, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumMay 20, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu): A NULL pointer dereference in the amdgpu powerMediumMay 9, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 9, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumMay 9, 2025
- TensorRT-LLM: RCE via unsafe pickle deserializationHighMay 1, 2025
- GPU Display Driver: Local privesc (insufficient access control)HighMay 1, 2025
- vGPU Manager: Local privesc via improper file permissionsMediumMay 1, 2025
- vGPU Manager: Host DoS via resource exhaustionMediumMay 1, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A division by zero in the amdgpu power managementMediumMay 1, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A division by zero in the amdgpu power managementMediumMay 1, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A division by zero in the amdgpu power managementMediumMay 1, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm/smu11): A division by zero in the amdgpu powerMediumMay 1, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A division by zero in the amdgpu power managementMediumMay 1, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A division by zero in the amdgpu power managementMediumMay 1, 2025
- NVIDIA App: Local privescHighApr 22, 2025
- NeMo Framework: RCE via insecure deserializationHighApr 22, 2025
- NeMo Framework: Arbitrary file write/read via path traversalHighApr 22, 2025
- NeMo Framework: RCEHighApr 22, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu): Missing or insufficient validation of user-suppliedMediumApr 18, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumApr 16, 2025
- Linux kernel amdgpu kernel driver core (drm/amdgpu): Memory is handed to a consumer without being initialised orMediumApr 2, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumApr 2, 2025
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A correctness defect in the amdgpuMediumApr 2, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A use-after-free in the amdgpu display core (DC/DM)HighApr 1, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighApr 1, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumApr 1, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumApr 1, 2025
- NVIDIA Riva: Unauthorized access to the speech service (insufficient access control)HighMar 11, 2025
- NVIDIA NeMo Framework: A relative path traversal gives arbitrary file write, reaching code executionHighMar 11, 2025
- NVIDIA Riva: Weak authenticationMediumMar 11, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu): An out-of-bounds access in the amdgpu powerHighFeb 27, 2025
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A correctness defect in the amdgpuMediumFeb 27, 2025
- Container Toolkit: Container escape to host filesystem (bypass of the CVE-2024-0132 fix)HighFeb 12, 2025
- NVIDIA Project G-Assist (Windows display driver, R580/R570): A permissions flaw in the G-Assist component that shipsHigh2025
- Linux kernel (drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535): Nouveau's GSP RPC layer frees the caller's messageHigh2025
- Altair Grid Engine (shared library loading): Grid Engine does not sanitise the environment variables that controlHigh2025
- NVIDIA Jetson Linux (UEFI): UEFI accepts a Linux Device Tree without checking authorization, so anyone who reachesHigh2025
- NVIDIA BlueField-3 RNIC/DPU - microarchitectural state and pipeline resources under containerized multi-tenancyHigh2025
- NVIDIA BlueField-3 RNIC/DPU - microarchitectural state and pipeline resources under containerized multi-tenancyHigh2025
- NVIDIA/Mellanox ConnectX driver (mlx5_ib memory-region page size selection): Mlx5_ib stored the result of itsHigh2025
- NVIDIA/Mellanox ConnectX driver (mlx5_ib ODP invalidation vs MR deregistration race): During deregistration the lkey isHigh2025
- NVIDIA/Mellanox ConnectX driver (mlx5 core completion-queue creation defaults): Every CQ created without an explicitHigh2025
- NVIDIA Nsight Graphics (ngfx component, Windows): An ngfx component resolves a DLL from an untrusted search path, soMedium2025
- NVIDIA Jetson Linux / IGX OS (NvMap): NvMap does not track memory allocations correctly, so one unprivileged processMedium2025
- Altair Grid Engine (error message handling): Grid Engine leaks password hash material in error messages. Hashes liftedMedium2025
- NVIDIA GDDR6 GPU memory (A6000-class and similar discrete GPUs): The first demonstrated Rowhammer bit flips in GPUUnscored2025
- NVIDIA GPUs with GDDR6 and no on-die ECC - demonstrated on RTX A6000Unscored2025
- NVIDIA GPUs with GDDR6 and no on-die ECC - demonstrated on RTX A6000Unscored2025
- NVIDIA GDDR6 GPU memory (A6000-class and similar discrete GPUs): The first demonstrated Rowhammer bit flips in GPUUnscored2025
2022127
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu): Missing or insufficient validation of user-suppliedUnscoredDec 30, 2025
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A memory or reference-count leak in the amdgpu kernel driver coreUnscoredDec 24, 2025
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A memory or reference-count leakUnscoredDec 24, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (amdgpu/pm): An out-of-bounds access in the amdgpu powerUnscoredDec 24, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu/powerplay/psm): A memory or reference-count leakUnscoredDec 8, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amdgpu): A memory or reference-count leak in the amdgpu display coreMediumOct 7, 2025
- Linux kernel amdgpu kernel driver core (drm/amdgpu): Missing or insufficient validation of user-supplied parameters inMediumOct 7, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 7, 2025
- Linux kernel amdgpu kernel driver core (drm/amd): A memory or reference-count leak in the amdgpu kernel driver coreMediumOct 4, 2025
- Linux kernel DRM scheduler / TTM / dma-buf shared layer used by amdgpu (drm/amdgpu): Missing or insufficient validationHighSep 18, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJun 18, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A use-after-free in the amdgpuHighJun 18, 2025
- habanalabs kernel driver (Gaudi NIC queue validation): A shift-out-of-bounds in Gaudi NIC queue validation: the driverHighJun 18, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJun 18, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A memory or reference-count leak in the amdgpu powerMediumJun 18, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A memory or reference-count leak in the amdgpu powerMediumJun 18, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A memory or reference-count leak in the amdgpu powerMediumJun 18, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A race condition or locking defect in the amdgpu displayMediumMay 1, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A double free in the amdgpu display core (DC/DM)HighFeb 26, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A use-after-free in the amdgpu power managementHighFeb 26, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumFeb 26, 2025
- habanalabs kernel driver (MMU shadow teardown): A memory leak on the habanalabs MMU teardown pathMediumFeb 26, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreMediumFeb 26, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amd/amdgpu/amdgpu_cs): A memory or reference-countMediumFeb 26, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumFeb 26, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreMediumFeb 26, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)MediumFeb 26, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu/cs): Missing or insufficient validation ofMediumFeb 26, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amdgpu): An out-of-bounds access in the amdgpu display core (DC/DM)MediumFeb 26, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu/pm): A NULL pointer dereference in the amdgpu powerMediumFeb 26, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighOct 21, 2024
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A use-after-free in the amdgpu RAS / GPU reset andHighOct 21, 2024
- Linux memory management (NUMA balancing) as used by Gaudi accelerators: Automatic NUMA balancing migrated copy-on-writeHighJul 16, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A race condition or locking defectMediumJul 16, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumJun 20, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreMediumMay 3, 2024
- GeForce Experience installer: Local privesc via symlink followingMediumFeb 12, 2023
- GeForce Experience installer: Local privesc via untrusted search pathHighFeb 7, 2023
- GeForce Experience installer: Local privesc during installMediumFeb 7, 2023
- Isaac Sim / Omniverse: Local privesc (improper input validation in config)HighJan 13, 2023
- DGX-2 BMC: RCE on BMC (buffer overflow)HighJan 13, 2023
- DGX servers BMC: Improper access control on BMCHighJan 13, 2023
- NVIDIA DGX A100 - SBIOS / SMM firmware: The SmiFlash SMM handler lets a privileged local user read, write and eraseHighJan 13, 2023
- NVIDIA DGX Station - SBIOS / SMM firmware: The same SmiFlash read/write/erase primitive on DGX Station, givingHighJan 13, 2023
- DGX servers BMC: OS command injection on BMCHighJan 13, 2023
- DGX-2 SBIOS: OS command injection in firmwareHighJan 13, 2023
- DGX-2 SBIOS: OS command injection in BIOSHighJan 13, 2023
- DGX-2 BMC: Path traversalHighJan 13, 2023
- NVIDIA DGX A100 - SBIOS / SMM firmware: An out-of-bounds write in the FsRecovery module reaches firmware code executionMediumJan 13, 2023
- DGX-2 BMC: Info disclosure via path traversalMediumJan 13, 2023
- DGX-2 BMC: Buffer overflowMediumJan 13, 2023
- DGX servers BMC: Sensitive data exposure from BMCMediumJan 13, 2023
- NVIDIA DGX A100 - SBIOS / SMM firmware: A privileged user can disable SPI flash write protection during the Pre-EFIMediumJan 13, 2023
- DGX-2 SBIOS: OOB write in BIOSMediumJan 13, 2023
- DGX-2 BMC: Path traversalMediumJan 13, 2023
- DGX servers BMC: Info exposure from BMCMediumJan 13, 2023
- DGX servers BMC: RCE on BMC (buffer overflow)HighJan 12, 2023
- DGX servers BMC: RCE on BMC (buffer overflow)HighJan 12, 2023
- DGX servers (BMC firmware < 2.09.00): RCE on BMC (buffer overflow)HighJan 11, 2023
- NVIDIA GPU Display Driver - Windows user mode layer: The user mode driver layer lets an unprivileged user readHighDec 30, 2022
- GPU Display Driver (kernel): Local privesc to host root (kernel buffer overflow)HighDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): Truncation when casting to a smaller primitive loses dataHighDec 30, 2022
- NVIDIA vGPU software - guest driver (inside tenant VM): A D-Bus configuration file shipped with the Linux vGPU guestHighDec 30, 2022
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): An unvalidated input index in the vGPUHighDec 30, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An out-of-bounds read in the Windows driverHighDec 30, 2022
- Jetson AGX Xavier / Orin bootloader: Local privesc (stack overflow in bootloader)HighDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An out-of-bounds read in the kernel mode handler leaksHighDec 30, 2022
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): A second unvalidated index path in theHighDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An integer overflow in the kernel mode handler leaksHighDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An unprivileged user drives the kernel to useHighDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): A kernel helper maps more physical pages than wereMediumDec 30, 2022
- NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): An unprivileged userMediumDec 30, 2022
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): The Virtual GPU Manager ignores aMediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An unprivileged user forces an integer truncationMediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An unhandled return value leads to a null-pointerMediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): Integer truncation leads to an out-of-bounds readMediumDec 30, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): Improper validation of a display-related dataMediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An unprivileged user triggers a null-pointer dereferenceMediumDec 30, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): A null-pointer dereference in the DxgkDdiEscapeMediumDec 30, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): The DxgkDdiEscape handler exposes informationMediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An off-by-one error in nvidia.ko permits data tamperingMediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An out-of-bounds array access in nvidia.ko givesMediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): A second out-of-bounds array access path in nvidia.koMediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An integer overflow in index validation defeatsMediumDec 30, 2022
- NVIDIA GPU Display Driver (nvidia.ko): integer overflow in the kernel mode layer reachable by a local GPU userMediumDec 30, 2022
- GPU Display Driver / vGPU guest driver: DoS / info disclosure (integer overflow)MediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An out-of-bounds array access in nvidia.ko yields denialMediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An integer overflow in nvidia.ko crashes the driverMediumDec 30, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): Missing data validation lets a basic user causeHighNov 19, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): Missing input validation in nvidia.ko lets a basic localHighNov 19, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An optional D-Bus configuration file shippedHighNov 19, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An out-of-bounds write in the kernel mode layerHighNov 19, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An out-of-bounds read in the kernel mode layerHighNov 19, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An out-of-bounds read through DxgkDdiEscape leaksHighNov 19, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): Any local user can null-pointer-dereferenceHighNov 19, 2022
- NVIDIA GPU Display Driver kernel mode layer: null-pointer dereferences allow local denial of serviceMediumNov 19, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An out-of-bounds read through DxgkDdiEscapeMediumNov 19, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): A basic local user triggers a null-pointer dereferenceMediumNov 19, 2022
- NVIDIA CUDA Toolkit - cuobjdump: A stack-based buffer overflow on a malformed input file yields limited denialMediumNov 19, 2022
- NVIDIA MLNX_DPDK: Improper error recovery in NVIDIA's DPDK distribution lets a remote attacker cause denial of serviceMediumSep 1, 2022
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): The vGPU plugin lets a guest VMHighAug 5, 2022
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): The vGPU plugin double-frees hostHighAug 5, 2022
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): A null-pointer dereference in the vGPUMediumAug 5, 2022
- NVIDIA DGX A100 - SBIOS / SMM firmware: An uninitialised pointer in the Ofbd SMM handler gives a privileged local userHighJul 4, 2022
- NVIDIA DGX A100 - SBIOS / SMM firmware: An integer overflow in SmmCore, chainable from another bug, reaches SMM codeHighJul 4, 2022
- NVIDIA DGX A100 - SBIOS / SMM firmware: An out-of-bounds write in the SmbiosPei module gives a highly privileged localMediumJul 4, 2022
- NVIDIA DGX A100 - SBIOS / SMM firmware: An out-of-bounds write in IpSecDxe, exploitable against a preconditioned heapMediumJul 4, 2022
- NVIDIA DGX A100 - SBIOS / SMM firmware: Improper array index validation in IpSecDxe gives firmware-phase code executionMediumJul 4, 2022
- NVIDIA DGX A100 - SBIOS / SMM firmware: The BiosCfgTool reads and writes outside its bounds in SMRAM, handingHighJul 2, 2022
- NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): A specially crafted shaderHighMay 17, 2022
- NVIDIA GPU Display Driver - Windows DirectX 11 user mode driver (nvwgf2um.dll / nvwgf2umx.dll): A crafted shader causesHighMay 17, 2022
- NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): An out-of-bounds readHighMay 17, 2022
- NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): The DxgkDdiEscape handlerHighMay 17, 2022
- NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): An out-of-bounds writeMediumMay 17, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): Improper input validation in the DxgkDdiEscapeMediumMay 17, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): The kernel mode layer fails to release a resourceMediumMay 17, 2022
- NVIDIA GPU Display Driver (Windows): improper input validation in DxgkDdiEscape lets a local user crash the nodeMediumMay 17, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): A null-pointer dereference in the DxgkDdiEscapeMediumMay 17, 2022
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): An unprivileged guest user drivesMediumMay 17, 2022
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): A use-after-free in the host vGPUMediumMay 17, 2022
- NVIDIA CUDA Toolkit - cuobjdump: An integer overflow reached by disassembling a corrupted fatbin gives remote codeHighMar 29, 2022
- NVIDIA DCGM - nv-hostengine: A network-reachable caller drives nv-hostengine into an unhandled error conditionMediumMar 24, 2022
- NVIDIA License System - DLS virtual appliance: Installation scripts on the DLS appliance leave other users' credentialsMediumFeb 15, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An unprivileged local user gets limited write accessMediumFeb 7, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An unprivileged local user gets limited write accessMediumFeb 7, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): A null pointer dereference created from user modeMediumFeb 7, 2022
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): A user inside a guest VM triggers a GPUMediumFeb 7, 2022
2023139
- Linux kernel amdgpu display core (DC/DM) (drm/amd): An out-of-bounds access in the amdgpu display core (DC/DM)UnscoredDec 24, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)HighDec 9, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (amdgpu): An out-of-bounds access in the amdgpuHighDec 9, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)UnscoredDec 9, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighDec 8, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): An out-of-bounds access in the amdgpuHighOct 22, 2025
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A race condition or locking defect in the amdgpuUnscoredOct 22, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A race condition or locking defectMediumOct 7, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A NULL pointer dereference in the amdgpuHighOct 4, 2025
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A race condition or locking defectMediumOct 4, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu/gfx): A race condition or locking defect in the amdgpuHighOct 1, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 1, 2025
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A memory or reference-count leakMediumSep 18, 2025
- Linux kernel DRM scheduler / TTM / dma-buf shared layer used by amdgpu (drm/sched): Memory is handed to a consumerMediumSep 17, 2025
- Linux kernel DRM scheduler / TTM / dma-buf shared layer used by amdgpu (drm/ttm): Missing or insufficient validation ofMediumSep 17, 2025
- Linux kernel habanalabs: early mem_mgr IDR teardown leaks memory buffers held by a live Gaudi contextMediumSep 17, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu): A race condition or locking defect in the amdgpuMediumSep 15, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A race condition or locking defectMediumSep 15, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A NULL pointer dereference in the amdgpuMediumSep 15, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A race condition or locking defectMediumSep 15, 2025
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A NULL pointer dereference in the amdgpu kernel driver coreMediumSep 15, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)MediumSep 15, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighMay 2, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A race condition or locking defectMediumMay 2, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)MediumMay 2, 2025
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A race condition or locking defect in the amdgpuMediumMay 2, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A use-after-free in the amdgpuHighNov 19, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A NULL pointer dereference in the amdgpu kernel driver coreMediumAug 21, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A race condition or locking defectMediumAug 21, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A NULL pointer dereference in the amdgpuHighJun 20, 2024
- Linux kernel amdgpu kernel driver core (drm/amd): An out-of-bounds access in the amdgpu kernel driver core - a lengthHighMay 21, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd): An out-of-bounds access in the amdgpu power managementHighMay 21, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd): An out-of-bounds access in the amdgpu power managementMediumMay 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 21, 2024
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A NULL pointer dereference in the amdgpu RAS / GPUMediumMay 21, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu/vkms): A NULL pointer dereference in the amdgpu kernel driver coreMediumMay 21, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu): A NULL pointer dereference in the amdgpu powerMediumMay 21, 2024
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/fence): A NULL pointer dereference in the amdgpu RASMediumMay 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 21, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A double free in the amdgpu power managementHighMay 17, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)MediumMay 17, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 17, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumMay 17, 2024
- NVIDIA nvJPEG2000 library: Improper input validation on a crafted JPEG2000 file causes a partial denial of serviceLowApr 5, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumApr 2, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)HighMar 26, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumMar 26, 2024
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A NULL pointer dereference in the amdgpu RAS / GPUMediumMar 6, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A race condition or locking defect in the amdgpu displayMediumFeb 29, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumFeb 23, 2024
- BlueField-2 / BlueField-3 DPU BMC: Code injection on DPU BMCHighJan 24, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface: A use-after-free in the amdgpu GEM/VM/command-submissionHighJan 23, 2024
- DGX A100 BMC: Full BMC compromise (heap buffer overflow) — worst-case out-of-band takeoverCriticalJan 12, 2024
- DGX A100 BMC: unauthenticated stack overflow in the host KVM daemon leads to RCECriticalJan 12, 2024
- DGX A100 SBIOS: Improper crypto config / UI-layer restriction in SBIOSHighJan 12, 2024
- DGX A100 SBIOS: Improper input validation in SBIOSHighJan 12, 2024
- Triton Inference Server: RCE / privesc / data tampering via model-load path traversal (`--model-control explicit`)HighJan 12, 2024
- DGX A100 BMC: Missing authentication on BMC serviceMediumJan 12, 2024
- DGX A100 SBIOS: Integer overflow in SBIOSMediumJan 12, 2024
- DGX A100 BMC: LDAP injection in BMC authMediumJan 12, 2024
- DGX A100 SBIOS: Buffer overflow in SBIOSMediumJan 12, 2024
- GPU Display Driver (Windows): Arbitrary write to privileged locations via reparse pointsHighNov 2, 2023
- GPU Display Driver (Windows): Local privesc during driver updateHighNov 2, 2023
- GPU Display Driver (Windows): Local privesc via named-pipe server accessHighNov 2, 2023
- GPU Display Driver (Windows): Arbitrary code exec via uncontrolled search pathHighNov 2, 2023
- GPU Display Driver (Linux + Windows KMD): Host DoS (null deref from unprivileged user)MediumNov 2, 2023
- GPU Display Driver (Windows): DoS / data tamperingMediumNov 2, 2023
- vGPU software (Virtual GPU Manager): Host-side DoS (null deref in vGPU Manager)MediumNov 2, 2023
- vGPU software: Guest-triggered host DoS (null deref)MediumNov 2, 2023
- GPU Display Driver / vGPU: DoS (null deref)MediumNov 2, 2023
- GPU Display Driver (Windows): DoS (untrusted pointer deref)MediumNov 2, 2023
- DGX H100 BMC (openBMC): RCE on BMC (web server plugin stack overflow)HighSep 20, 2023
- DGX H100 BMC: Privesc + code execution (web UI input validation)HighSep 20, 2023
- DGX H100 BMC (REST): Code execution + privescHighSep 20, 2023
- DGX H100 BMC (KVM daemon): Session token theft via timing side channelHighSep 20, 2023
- DGX H100 BMC (KVM): Code execution + privescHighSep 20, 2023
- DGX H100 BMC: Kernel memory corruptionHighSep 20, 2023
- DGX H100 BMC (IPMI): Credential exposureHighSep 20, 2023
- Cumulus Linux (switch OS): Cross-tenant info disclosure (VxLAN IPv6 mis-forwarding on SVI)HighSep 20, 2023
- DGX H100 BMC (IPMI): PrivescHighSep 20, 2023
- DGX H100 BMC (IPMI): DoS of the BMCMediumSep 20, 2023
- DGX H100 BMC (REST): Privesc via auth flawMediumSep 20, 2023
- Cumulus Linux (neighmgrd/nlmanager): Switch DoS via crafted packetMediumSep 20, 2023
- DGX H100 BMC (IPMI): Info disclosure of credentialsMediumSep 20, 2023
- DGX H100 BMC: improper input validation in the REST service allows privilege escalation and info disclosureMediumSep 20, 2023
- DGX H100 BMC (IPMI): Info disclosureMediumSep 20, 2023
- DGX H100 BMC (REST): DoSMediumSep 20, 2023
- GeForce NOW Android app: Info disclosure / code exec via implicit intentMediumSep 20, 2023
- NVIDIA BlueField: Privilege escalation from incorrect user management on the DPUHighSep 12, 2023
- Omniverse Launcher: Access-token disclosureMediumAug 3, 2023
- DGX A100 / A800 SBIOS: Code execution + privesc in SBIOSHighJul 4, 2023
- DGX A100 / A800 SBIOS: DoS / data tampering / info disclosureHighJul 4, 2023
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An unprivileged user triggers an integer overflowHighJul 4, 2023
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): The vGPU plugin lets a guest OS controlHighJul 4, 2023
- CUDA Toolkit (nvdisasm): DoS (null deref via malformed ELF)LowJul 4, 2023
- NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): The driver parses unexpectedHighJun 23, 2023
- Jetson AGX Xavier / Xavier NX: Arbitrary memory R/W (PCIe controller without IOMMU)HighJun 23, 2023
- Jetson TX2 / AGX Xavier (nvbootctrl): DoS via invalid boot configMediumJun 23, 2023
- GPU Display Driver: Local privesc to host root (use-after-free)HighApr 22, 2023
- NVIDIA DGX-1 - SBIOS / SMM firmware: The Uncore PEI module never authenticates the code executed by SSA, soHighApr 22, 2023
- NVIDIA DGX-2 - SBIOS / SMM firmware: An out-of-bounds access in the OFBD SMM handler against a preconditioned heapHighApr 22, 2023
- NVIDIA DGX A100 - SBIOS / SMM firmware: The GenericSio and LegacySmmSredir SMM APIs allow arbitrary modificationHighApr 22, 2023
- NVIDIA DGX A100 - SBIOS / SMM firmware: The NVME SMM API allows arbitrary SMRAM modification, again reaching full SMMHighApr 22, 2023
- NVIDIA DGX-2 - SBIOS / SMM firmware: Privileged code can modify the ServerSetup NVRAM variable at runtime, alteringHighApr 22, 2023
- NVIDIA DGX-1 - SBIOS / SMM firmware: An out-of-bounds access in the Ofbd handler in the AMI SBIOS reaches SMM codeHighApr 22, 2023
- NVIDIA DGX-2 - SBIOS / SMM firmware: An out-of-bounds write in the Bds phase gives a privileged local user firmwareMediumApr 22, 2023
- ConnectX-5/6/6-DX NIC firmware: NIC DoS (improper exception handling)MediumApr 22, 2023
- NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): An out-of-bounds writeMediumApr 22, 2023
- NVIDIA DGX-1 - SBIOS / SMM firmware: A flaw in the Bds phase reaches firmware code execution and privilege escalationMediumApr 22, 2023
- GPU Display Driver: DoS (null deref)MediumApr 22, 2023
- NVIDIA CUDA Toolkit - cuobjdump: out-of-bounds reads parsing malformed input filesMediumApr 22, 2023
- ConnectX-5/6/6-DX NIC firmware: NIC DoS (insufficient access-control granularity)MediumApr 22, 2023
- ConnectX-5/6/6-DX NIC firmware: NIC DoSMediumApr 22, 2023
- NVIDIA CUDA Toolkit - cuobjdump: A null-pointer dereference on a malformed binary crashes the toolLowApr 22, 2023
- NVIDIA CUDA Toolkit - cuobjdump: A division-by-zero on crafted input crashes the toolLowApr 22, 2023
- GPU Display Driver: Local privesc to host root (use-after-free)HighApr 1, 2023
- NVIDIA DCGM - nv-hostengine: A heap-based buffer overflow reachable through the bound socket gives denial of serviceHighApr 1, 2023
- GPU Display Driver: Local privesc to host root (kernel buffer overflow)HighApr 1, 2023
- GPU Display Driver (GeForce/RTX/Quadro/Tesla/vGPU): Info disclosure + DoS (OOB read in kernel driver)HighApr 1, 2023
- GPU Display Driver: Local privesc / data tampering (missing access control)HighApr 1, 2023
- GPU Display Driver: Local privesc (kernel buffer overflow)HighApr 1, 2023
- GPU Display Driver: Local privesc / data tampering (OOB write)HighApr 1, 2023
- GPU Display Driver: DoS / data tampering (integer underflow)MediumApr 1, 2023
- GPU Display Driver: Local privesc (kernel buffer overflow)MediumApr 1, 2023
- GPU Display Driver: DoS (GPU firmware buffer overflow)MediumApr 1, 2023
- GPU Display Driver: Info disclosure (OOB read)MediumApr 1, 2023
- GPU Display Driver: DoS (stack overflow)MediumApr 1, 2023
- vGPU Manager (Cloud Gaming): Guest-triggered host DoS (null deref)MediumApr 1, 2023
- GPU Display Driver: Improper privilege managementMediumApr 1, 2023
- GPU Display Driver: Physical memory accessLowApr 1, 2023
- GPU Display Driver: Physical memory disclosureLowApr 1, 2023
- CUDA Toolkit: DoS / info disclosure (buffer over-read in cuobjdump)MediumMar 10, 2023
- CUDA Toolkit: DoS (null deref)LowMar 2, 2023
- NVIDIA/Mellanox ConnectX driver (mlx5_ib UMR resource init/cleanup): A failed workqueue allocation during mkey-cacheHigh2023
- Integrated GPU graphics data compression (Intel, AMD, Apple, Arm, Qualcomm, NVIDIA): GPUs apply data-dependent losslessUnscored2023
- NVIDIA Confidential Computing (H100/H200/B100/B200/GB200) - CC-DevTools operating mode: NVIDIA GPU confidentialUnscored2023
- Integrated GPU graphics data compression (Intel, AMD, Apple, Arm, Qualcomm, NVIDIA): GPUs apply data-dependent losslessUnscored2023
- NVIDIA Confidential Computing (H100/H200/B100/B200/GB200) - CC-DevTools operating mode: NVIDIA GPU confidentialUnscored2023
2024269
- Intel Gaudi software installer: The Gaudi software installer leaves files and directories with permissions that letHighMay 14, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu): A NULL pointer dereference in the amdgpu powerMediumMar 6, 2025
- Hopper HGX 8-GPU (HMC/firmware): Improper input validation in baseboard firmwareHighMar 5, 2025
- Hopper HGX 8-GPU: DoS (inadequate loop termination in firmware)MediumMar 5, 2025
- IGX Orin bootloader: Improper access control in bootloaderHighFeb 25, 2025
- CUDA Toolkit (cuobjdump): out-of-bounds reads parsing malformed ELF files cause partial denial of serviceLowFeb 25, 2025
- CUDA Toolkit (nvdisasm): out-of-bounds reads parsing malformed ELF files cause partial denial of serviceLowFeb 25, 2025
- CUDA Toolkit: DoS (null deref)LowFeb 25, 2025
- CUDA Toolkit: cuobjdump crashes on malformed ELF input, causing partial denial of serviceLowFeb 25, 2025
- IGX Orin / Jetson AGX Orin: Privesc / DoSHighFeb 12, 2025
- nvJPEG2000: Code exec via OOB write on malicious imageMediumFeb 12, 2025
- nvJPEG2000: Code exec via OOB writeMediumFeb 12, 2025
- nvJPEG2000: Code exec via buffer overflowMediumFeb 12, 2025
- nvJPEG2000: Code exec via heap overflowMediumFeb 12, 2025
- Triton Inference Server: DoS (integer overflow)MediumFeb 12, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)MediumFeb 10, 2025
- GPU Display Driver: Info disclosure (OOB kernel memory access)MediumFeb 2, 2025
- vGPU Manager: Guest-to-host escape via GPU firmware buffer overflowHighJan 28, 2025
- Container Toolkit / GPU Operator: Container escape to host root (insufficient input validation)HighJan 28, 2025
- Container Toolkit / GPU Operator: Container escape to host (insufficient input validation)HighJan 28, 2025
- GPU Display Driver: Local privesc (kernel driver buffer overflow)HighJan 28, 2025
- RAPIDS cuDF / cuML: RCE via unsafe deserializationMediumJan 28, 2025
- Container Toolkit / GPU Operator: Host DoS / info disclosureMediumJan 28, 2025
- GPU Display Driver: DoS (use-after-free)MediumJan 28, 2025
- GPU Display Driver: Info disclosure (missing initialization)MediumJan 28, 2025
- vGPU Manager: Host DoS (missing error handling)MediumJan 28, 2025
- GPU Display Driver: Info disclosure (OOB read)LowJan 28, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A race condition or locking defect in the amdgpu displayHighJan 19, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amdgpu): Missing or insufficient validation of user-supplied parametersHighJan 19, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)MediumJan 19, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)MediumJan 19, 2025
- Linux kernel DRM scheduler / TTM / dma-buf shared layer used by amdgpu (drm/amdgpu): A NULL pointer dereferenceMediumJan 11, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A double free in the amdgpu display core (DC/DM)HighJan 8, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJan 8, 2025
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/gfx9): A memory or reference-count leakMediumDec 29, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): An out-of-bounds access in the amdgpuMediumDec 28, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A use-after-free in the amdgpu kernel driver core. Freed kernelHighDec 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighDec 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumDec 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumDec 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreMediumDec 27, 2024
- Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdgpu): Missing or insufficient validation of user-suppliedMediumDec 27, 2024
- UFM Enterprise / UFM Appliance / UFM CyberAI: Fabric-manager privesc, data corruption, service disruption via improperHighDec 6, 2024
- Base Command Manager (Linux): Local privesc via insecure temporary file handlingMediumDec 6, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)HighDec 4, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighDec 2, 2024
- Base Command Manager (CMDaemon): Unauthenticated RCE on the cluster managerCriticalNov 23, 2024
- NVIDIA License System - Delegated Licensing Service (DLS): An unauthorised action against the DLS reaches partialHighNov 23, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): An out-of-bounds access in the amdgpuHighNov 19, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A NULL pointer dereference in the amdgpuMediumNov 19, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (platform/x86/amd/pmc): A correctness defect in the amdgpu powerMediumNov 19, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): An out-of-bounds access in the amdgpu powerHighNov 9, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)MediumNov 8, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amd): A NULL pointer dereference in the amdgpuHighNov 5, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A race condition or locking defect in the amdgpu displayMediumNov 5, 2024
- Container Toolkit / GPU Operator: Unauthorized file creation on the host (data tampering)MediumNov 5, 2024
- ConnectX / BlueField firmware: Improper certificate validationHighNov 1, 2024
- BlueField / ConnectX firmware: Improper certificate validation / access controlHighNov 1, 2024
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): A privileged attacker escalates throughHighOct 26, 2024
- NVIDIA GPU Display Driver (Windows user mode layer): out-of-bounds reads reachable by an unprivileged local userHighOct 26, 2024
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): A tenant who has compromised their ownHighOct 26, 2024
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): The host vGPU plugin lets a guest reachHighOct 26, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A double free in the amdgpu display core (DC/DM)HighOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A NULL pointer dereference in the amdgpu powerMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)MediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)MediumOct 21, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A NULL pointer dereference in the amdgpu kernel driver coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)MediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Memory is handed to a consumer without being initialisedMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- NVIDIA NeMo: SaveRestoreConnector extracts .tar archives unsafely, so a crafted archive writes files outsideMediumOct 15, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)HighOct 9, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)MediumOct 9, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumOct 9, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A race condition or locking defect in the amdgpu displayMediumOct 9, 2024
- NVIDIA CUDA Toolkit - nvdisasm: Improper input validation on a malicious ELF crashes the disassemblerLowOct 3, 2024
- NVIDIA CUDA Toolkit - nvdisasm: A use-after-free on a malformed ELF causes a crash and potentially worse dependingLowOct 3, 2024
- NVIDIA CUDA Toolkit - nvdisasm: A null-pointer dereference on a malformed ELF crashes the disassemblerLowOct 3, 2024
- NVIDIA Triton Inference Server: An out-of-bounds read triggered by releasing a shared memory region while it is stillMediumOct 1, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)HighSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighSep 27, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn): A correctness defect in the amdgpuHighSep 27, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): An out-of-bounds access in the amdgpu powerHighSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreHighSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)HighSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumSep 27, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A NULL pointer dereference in the amdgpu kernel driver coreMediumSep 27, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A correctness defect in the amdgpu kernel driver core reachableMediumSep 27, 2024
- Linux kernel amdgpu kernel driver core (drm/amd/amdgpu): Missing or insufficient validation of user-supplied parametersMediumSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumSep 27, 2024
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A correctness defect in the amdgpu RAS / GPU resetMediumSep 27, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A correctness defect in the amdgpuMediumSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumSep 27, 2024
- Container Toolkit: Container escape to host filesystem via TOCTOU in the **default** configurationCriticalSep 26, 2024
- Container Toolkit: Unauthorized empty-file creation on the hostMediumSep 26, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): An out-of-bounds access in the amdgpu kernel driver core - aHighSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)HighSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighSep 18, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): An out-of-bounds access in the amdgpu kernel driver core - aHighSep 18, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): An out-of-bounds access in the amdgpu kernel driver core - aHighSep 18, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): An out-of-bounds access in the amdgpu kernel driver core - aHighSep 18, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): An out-of-bounds access in the amdgpu powerHighSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumSep 18, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A NULL pointer dereference in the amdgpu kernel driver coreMediumSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)MediumSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)MediumSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)MediumSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumSep 13, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): An out-of-bounds access in the amdgpu kernel driver core - aHighSep 4, 2024
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A correctness defect in the amdgpu RAS / GPU resetMediumSep 4, 2024
- CUDA Toolkit: Memory-safety issueMediumAug 31, 2024
- CUDA Toolkit: OOB writeMediumAug 31, 2024
- CUDA Toolkit: Info disclosure (OOB read)LowAug 31, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumAug 26, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumAug 26, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumAug 26, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumAug 26, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumAug 26, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A NULL pointer dereference in the amdgpu powerMediumAug 26, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu/pm): A NULL pointer dereference in the amdgpu powerMediumAug 26, 2024
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A NULL pointer dereference in the amdgpu RAS / GPUMediumAug 26, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu/pm): A NULL pointer dereference in the amdgpu powerMediumAug 26, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumAug 17, 2024
- NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2/MetroX-3 XC: A crafted URI causes CGI path traversal in the switch webHighAug 12, 2024
- NVIDIA CV-CUDA: A long-running CV-CUDA Python process consumes resources without bound, ending in denial of serviceMediumAug 12, 2024
- Jetson (Xavier/TX/Nano): Improper error handlingHighAug 8, 2024
- GPU Display Driver: Local privesc (buffer over-read in driver)HighAug 8, 2024
- Mellanox OS / MetroX / Onyx / Skyway: Switch/gateway DoS (improper input validation)HighAug 8, 2024
- Mellanox OS / MetroX / Onyx / Skyway: Improper access control on switch mgmtMediumAug 8, 2024
- CUDA Toolkit: Info disclosure (OOB read)LowAug 8, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighJul 30, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighJul 30, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighJul 30, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighJul 30, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighJul 30, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A double free in the amdgpu firmware, ACPIHighJul 30, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): Memory is handed to a consumer without being initialised orHighJul 30, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumJul 30, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumJul 30, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJul 29, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)HighJul 29, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A correctness defect in the amdgpuHighJul 29, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A correctness defect in the amdgpu kernel driver core reachableMediumJul 29, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A NULL pointer dereference in the amdgpuHighJul 16, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu): A correctness defect in the amdgpu power managementMediumJul 12, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): An out-of-bounds access in the amdgpuHighJun 25, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): An out-of-bounds access in the amdgpuHighJun 24, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/mes): A use-after-free in the amdgpuHighJun 19, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJun 19, 2024
- Triton Inference Server: Improper logging of security events (audit gap)CriticalJun 13, 2024
- vGPU Manager: Guest-to-host privescHighJun 13, 2024
- GPU Display Driver: Local privesc (improper resource validation / uninit memory)HighJun 13, 2024
- GPU Display Driver: Local privesc to host root (OOB write)HighJun 13, 2024
- GPU Display Driver: Local privesc to host root (use-after-free)HighJun 13, 2024
- vGPU Manager: Guest-to-host escape (buffer overflow)HighJun 13, 2024
- vGPU Manager: Cross-tenant info disclosureMediumJun 13, 2024
- vGPU Manager: Improper permission managementMediumJun 13, 2024
- vGPU Manager: Host DoS (null deref)MediumJun 13, 2024
- GPU Display Driver: DoSMediumJun 13, 2024
- vGPU Manager: Host resource exhaustion / DoSMediumJun 13, 2024
- Triton Inference Server: Insufficient access-control granularityMediumJun 13, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)MediumJun 8, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighMay 30, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A correctness defect in the amdgpu power managementMediumMay 30, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 30, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A race condition or locking defect in the amdgpu displayMediumMay 30, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A race condition or locking defectHighMay 19, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A correctness defect in the amdgpuHighMay 17, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A race condition or locking defectMediumMay 17, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 17, 2024
- Triton Inference Server: RCE via path traversal on the model-load APICriticalMay 14, 2024
- Linux kernel DRM scheduler / TTM / dma-buf shared layer used by amdgpu (drm/amdgpu): A NULL pointer dereferenceHighMay 14, 2024
- ChatRTX: Local privescHighMay 14, 2024
- ChatRTX: Local privescHighMay 14, 2024
- Triton Inference Server: Info disclosure via path traversalMediumMay 14, 2024
- Triton Inference Server: DoS (stack buffer overflow)MediumMay 14, 2024
- ChatRTX: Unencrypted credential storageMediumMay 14, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): An out-of-bounds access in the amdgpu kernel driver core - aHighMay 1, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighMay 1, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 1, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu/pm): A NULL pointer dereference in the amdgpu powerMediumMay 1, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 1, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 1, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 1, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): Missing or insufficient validation ofHighApr 23, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighApr 17, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighApr 17, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreMediumApr 17, 2024
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): An out-of-bounds access in the amdgpu RAS / GPUMediumApr 17, 2024
- ChatRTX: Local privescHighApr 8, 2024
- ChatRTX: XSSMediumApr 8, 2024
- CUDA Toolkit: DoS (null deref)LowApr 5, 2024
- CUDA Toolkit: Info disclosure (buffer over-read)LowApr 5, 2024
- nvTIFF library: DoS via malformed imageLowApr 5, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighApr 4, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighApr 3, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighApr 3, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumApr 3, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumApr 3, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumApr 3, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A use-after-free in the amdgpuHighApr 2, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu): A NULL pointer dereference in the amdgpu powerHighApr 2, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighApr 2, 2024
- Linux kernel DRM scheduler / TTM / dma-buf shared layer used by amdgpu (drm/sched): A NULL pointer dereferenceMediumApr 2, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumApr 2, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumApr 2, 2024
- GPU Display Driver: Local privesc (kernel buffer over-read)HighMar 27, 2024
- GPU Display Driver: Local privesc (improper privilege management)HighMar 27, 2024
- vGPU Manager: Guest-to-host privesc (improper privilege management)HighMar 27, 2024
- GPU Display Driver: Local privesc / data tampering (OOB write)HighMar 27, 2024
- GPU Display Driver: DoS (null deref)MediumMar 27, 2024
- vGPU Manager: Guest-triggered host DoSMediumMar 27, 2024
- GPU Display Driver: DoS (null deref)MediumMar 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMar 26, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMar 26, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A NULL pointer dereference in the amdgpuMediumMar 26, 2024
- NVIDIA/Mellanox ConnectX flow steering core (mlx5 fs_core FTE active-flag race): Two-phase flow-table-entry deletionHigh2024
- Linux kernel (drivers/gpu/drm/nouveau/nvkm/subdev/gsp): The GSP message-queue read pointer is advanced by the wrongHigh2024
- BIOS firmware on Supermicro X11DPG-HGX2, X11PDG-QT, X11PDG-OT and X11PDG-SN before version 4.4: An arbitrary memoryHigh2024
- NVIDIA GPUDirect RDMA - GPU BAR1 window peer-mapped to the RNIC, nvidia-peermem / nvidia_p2p_get_pages: GPUDirect RDMAHigh2024
- NVIDIA GPUDirect RDMA - GPU BAR1 window peer-mapped to the RNIC, nvidia-peermem / nvidia_p2p_get_pages: GPUDirect RDMAHigh2024
- NVIDIA/Mellanox ConnectX flow steering core (mlx5 fs_core rule tree linkage): Flow steering is what decides whichHigh2024
- Linux kernel (drivers/gpu/drm/nouveau/nvkm/subdev/gsp): The driver miscalculates free space in the GSP firmware commandMedium2024
- NVIDIA Remote Attestation Service (NRAS) / NVIDIA attestation SDK: Verifying an NVIDIA GPU attestation reportUnscored2024
202177
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A memory or reference-count leak in the amdgpu powerMediumFeb 26, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A memory or reference-count leak in the amdgpu powerMediumFeb 26, 2025
- Linux kernel amdgpu kernel driver core (drm/amd/amdgpu): A memory or reference-count leak in the amdgpu kernel driverMediumMay 24, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amdgpu): An out-of-bounds access in the amdgpu display core (DC/DM)HighMay 22, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Memory is handed to a consumer without being initialisedCriticalMay 21, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A race condition or locking defect in the amdgpu kernel driverHighMay 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreMediumMay 21, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A NULL pointer dereference in the amdgpu powerMediumMay 21, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A memory or reference-count leakMediumMay 21, 2024
- Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdgpu): A use-after-free in the amdkfd (KFD compute driverHighMar 25, 2024
- habanalabs kernel driver (gaudi_memset_device_memory): Use-after-free in the Gaudi device-memory memset pathHighMar 1, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighFeb 28, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreMediumFeb 28, 2024
- NVIDIA GPU firmware microcontroller (Falcon): A privileged user can craft microcode that the GPU's internalHighNov 20, 2021
- NVIDIA GPU firmware microcontroller (Falcon): A privileged user can time a DMA write from the GPU's internalHighNov 20, 2021
- NVIDIA GPU firmware microcontroller (Falcon): Debug mechanisms in the GPU's internal microcontroller are reachable withMediumNov 20, 2021
- NVIDIA GPU firmware microcontroller (Falcon): Debug registers on the GPU's internal microcontroller are readable atMediumNov 20, 2021
- NVIDIA GPU firmware microcontroller (Falcon): Program data in the GPU's internal microcontroller can be corrupted by aMediumNov 20, 2021
- NVIDIA GPU firmware microcontroller (Falcon): Loading crafted microcode gives a privileged user access to informationMediumNov 20, 2021
- NVIDIA GPU firmware microcontroller (Falcon): Registers in the GPU's internal microcontroller are not scrubbed, so aMediumNov 20, 2021
- NVIDIA GPU firmware microcontroller (Falcon): Unscrubbed microcontroller memory leaks data to a privileged user. SameMediumNov 20, 2021
- NVIDIA vGPU Manager (vGPU plugin): The guest OS can execute privileged operations through the vGPU Manager, whichHighOct 29, 2021
- NVIDIA vGPU Manager (vGPU plugin): Double free in the vGPU Manager that NVIDIA explicitly describes as aHighOct 29, 2021
- NVIDIA vGPU Manager (vGPU plugin): A guest-supplied string may not be null-terminated, and the host plugin reads pastHighOct 29, 2021
- NVIDIA vGPU Manager kernel module (nvidia.ko, host): One vGPU can starve the other vGPUs hosted on the same physicalMediumOct 29, 2021
- NVIDIA vGPU Manager (vGPU plugin): Guest-reachable NULL dereference in the vGPU plugin causing denial of service acrossMediumOct 29, 2021
- NVIDIA vGPU Manager (vGPU plugin): A guest can deadlock the vGPU plugin. A hung plugin does not crash-and-restartMediumOct 29, 2021
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): NULL dereference reachable through private IOCTLs, with NVIDIA notingMediumOct 27, 2021
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): A NULL pointer created in user-mode code is dereferencedMediumOct 27, 2021
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Improper input validation in the escape handler under specificMediumOct 27, 2021
- RISC-V ISA (MTVEC register) as used in NVIDIA GPU microcontrollers: A documented ambiguity in the RISC-V specificationCriticalAug 13, 2021
- NVIDIA DCGM (nv-hostengine, DIAG module): Any local user can inject a shared library into the DCGM serverHighAug 13, 2021
- NVIDIA GPU Display Driver for Windows, nvidia-smi: nvidia-smi loads DLLs from an uncontrolled pathHighJul 22, 2021
- NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): Out-of-bounds read or write in the kernel-modeHighJul 22, 2021
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Hard-link attack: an unprivileged user makes the driver overwriteHighJul 22, 2021
- NVIDIA GPU Display Driver, GPU firmware: An attacker-triggerable assert in GPU firmware aborts harder than it needsMediumJul 22, 2021
- NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): Out-of-bounds array access in the escape handlerMediumJul 22, 2021
- NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): All control calls with embedded parametersMediumJul 22, 2021
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): NULL dereference in the escape handler causing a system crashMediumJul 22, 2021
- NVIDIA vGPU Manager (vGPU plugin): The vGPU Manager trusts a length field in a guest request that does not match theHighJul 21, 2021
- NVIDIA vGPU Manager (vGPU plugin): The vGPU Manager fails to release resources on guest driver unload, and the guestHighJul 21, 2021
- NVIDIA vGPU Manager (vGPU plugin): Stack buffer overflow in the vGPU Manager with enough control for a guest to place aHighJul 21, 2021
- NVIDIA vGPU Manager kernel module (nvidia.ko, host): The host vGPU kernel module dereferences an unvalidated user-spaceMediumJul 21, 2021
- NVIDIA vGPU Manager (vGPU plugin): NULL dereference in the vGPU plugin, guest-reachableMediumJul 21, 2021
- NVIDIA vGPU Manager (vGPU plugin): Guest input drives the vGPU plugin into a floating-point exception and takes theMediumJul 21, 2021
- NVIDIA vGPU Manager (vGPU plugin): Another guest-reachable NULL dereference in the vGPU plugin causing denial ofMediumJul 21, 2021
- NVIDIA vGPU Manager (vGPU plugin): Unvalidated guest input in the vGPU Manager plugin giving host informationHighApr 29, 2021
- NVIDIA vGPU software (guest kernel-mode driver + vGPU plugin): Unvalidated length across the guest kernel-mode driverHighApr 29, 2021
- NVIDIA vGPU Manager (vGPU plugin): Unvalidated input length in the vGPU Manager plugin, yielding host disclosureHighApr 29, 2021
- NVIDIA vGPU software (guest kernel-mode driver + vGPU plugin): Unvalidated length across the guest driver and vGPUHighApr 29, 2021
- NVIDIA vGPU software (guest kernel-mode driver + vGPU plugin): Another unvalidated-length path between guest driver andHighApr 29, 2021
- NVIDIA vGPU Manager (vGPU plugin): The guest can write to a shared memory location after the host has validated itsHighApr 29, 2021
- NVIDIA vGPU Manager (vGPU plugin): The vGPU Manager lets guests control resources they are not entitled to, whichHighApr 29, 2021
- NVIDIA vGPU Manager (vGPU plugin): Information retrievable by a guest that defeats ASLR on the host side. On its own itMediumApr 29, 2021
- NVIDIA GPU Display Driver for Windows, installer: A race between the installer's integrity check and execution letsHighApr 21, 2021
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Use of a dangling pointer in the escape handler, rated code-executionHighApr 21, 2021
- NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): Improper access control in the kernel-mode layerMediumApr 21, 2021
- NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): Reference-count mishandling on a driver resourceMediumApr 21, 2021
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): NULL dereference in nvlddmkm.sys leading to a system crashMediumApr 21, 2021
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): A local user gets elevated enough to rewrite display configurationHighJan 8, 2021
- NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): User-mode clients can reach legacy privileged APIsHighJan 8, 2021
- NVIDIA vGPU Manager (vGPU plugin): The vGPU plugin lets guests allocate resources they are not authorised to holdHighJan 8, 2021
- NVIDIA vGPU Manager (vGPU plugin): Unvalidated guest index leads to integer overflow in the host plugin, then tamperingHighJan 8, 2021
- NVIDIA vGPU Manager (vGPU plugin): Unvalidated offset produces a buffer overread in the host plugin. A tenant readsHighJan 8, 2021
- NVIDIA Linux GPU Display Driver (nvidia.ko): Nvidia.ko does not fully honour filesystem permissions when providing GPUHighJan 8, 2021
- NVIDIA vGPU software (guest kernel-mode driver + vGPU plugin): Unvalidated input size across the guest kernel-modeHighJan 8, 2021
- NVIDIA vGPU software (guest kernel-mode driver + vGPU plugin): Unvalidated index across the guest driver and vGPUHighJan 8, 2021
- NVIDIA vGPU Manager (vGPU plugin): Unvalidated guest-supplied length in the vGPU pluginHighJan 8, 2021
- NVIDIA vGPU Manager (vGPU plugin): The plugin takes a value from the guest, casts it to a pointer and dereferences it.HighJan 8, 2021
- NVIDIA vGPU Manager (vGPU plugin): Unvalidated guest input in the vGPU plugin leading to host data tampering or aHighJan 8, 2021
- NVIDIA vGPU Manager (vGPU plugin): The plugin keeps using a resource it validated after the guest has changed it - aMediumJan 8, 2021
- NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): Improper validation of a user-supplied pointerMediumJan 8, 2021
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Missing authorization check in the escape handlerMediumJan 8, 2021
- NVIDIA vGPU Manager (vGPU plugin): Unvalidated guest input causes unbounded resource consumption on the host, so oneMediumJan 8, 2021
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Improper access control in the escape handler leaks informationMediumJan 8, 2021
- NVIDIA/Mellanox ConnectX driver (mlx5_ib completion-queue resize, init_cq_frag_buf): CQ resize initialised the wrongHigh2021
- NVIDIA/Mellanox ConnectX driver (mlx5_ib on-demand paging MR creation): The xarray tracking implicit on-demand-pagingHigh2021
202027
- NVIDIA CUDA Toolkit, nvJPEG library: Out-of-bounds read/write in nvJPEG while decoding an image, rated code-executionHighOct 30, 2020
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): A securely loaded system DLL then loads its own dependenciesHighOct 2, 2020
- NVIDIA Windows GPU Display Driver, DirectX 11 user-mode driver (nvwgf2um.dll): Crafted shader triggers an out-of-boundsHighOct 2, 2020
- NVIDIA vGPU Manager (vGPU plugin): Use-after-free while releasing resources in the vGPU plugin, rated code-executionHighOct 2, 2020
- NVIDIA vGPU Manager (vGPU plugin): Parameters stay writable by the guest after the plugin has validated them - aHighOct 2, 2020
- NVIDIA vGPU Manager (vGPU plugin + host kernel module): The host can be made to write outside the frame-buffer regionHighOct 2, 2020
- NVIDIA vGPU Manager (vGPU plugin): Guest-supplied length not validated, allowing host-side data tampering or aHighOct 2, 2020
- NVIDIA vGPU Manager (vGPU plugin): Double free in the vGPU plugin, guest-triggered. Host heap corruption or disclosure.HighOct 2, 2020
- NVIDIA vGPU Manager (vGPU plugin): Guest-supplied size not validated in the vGPU pluginMediumOct 2, 2020
- NVIDIA vGPU Manager (vGPU plugin): NULL dereference in the vGPU plugin reachable from a guest - one tenant crashes theMediumOct 2, 2020
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): No rate limiting in the kernel-mode scheduler: a local process floodsMediumOct 2, 2020
- NVIDIA vGPU Manager (vGPU plugin): The vGPU plugin fails to bound an indexed or pointer-based access, and NVIDIA callsHighJun 30, 2020
- NVIDIA vGPU Manager (vGPU plugin): Out-of-bounds read in the vGPU plugin that NVIDIA rates as code-execution capable. AHighJun 30, 2020
- NVIDIA vGPU Manager (vGPU plugin): Guest-supplied data size is not validated, letting a tenant tamper with host-sideHighJun 30, 2020
- NVIDIA vGPU Manager (vGPU plugin): Uninitialised local pointers later freed in the vGPU plugin - a guest-triggered freeHighJun 30, 2020
- NVIDIA vGPU Manager (vGPU plugin): Time-of-check to time-of-use on a shared resource between guest and host plugin. AMediumJun 30, 2020
- NVIDIA vGPU software (guest kernel-mode driver + vGPU plugin): The vGPU plugin lets guest code reach privilegedMediumJun 30, 2020
- NVIDIA GPU Display Driver, inter-process communication APIs: Improper access control on the driver's IPC surface givesHighJun 25, 2020
- NVIDIA GPU Display Driver service host component: The service host can skip its integrity check on applicationHighJun 25, 2020
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): NULL dereference in the escape handlerHighJun 25, 2020
- NVIDIA Windows GPU Display Driver, DirectX 11 user-mode driver (nvwgf2um.dll): A crafted shader causes an out-of-boundsMediumJun 25, 2020
- NVIDIA Linux GPU Display Driver, UVM driver (nvidia-uvm.ko): A race in the Unified Virtual Memory kernel module letsMediumJun 25, 2020
- NVIDIA vGPU Manager (vGPU plugin): Unvalidated guest-supplied index in the vGPU plugin. A tenant VM crashes the hostMediumMar 12, 2020
- NVIDIA vGPU Manager kernel module (nvidia.ko, host): NULL dereference in the host-side nvidia.ko under the vGPUMediumMar 12, 2020
- NVIDIA vGPU guest graphics driver: Bad cleanup on a failure path in the guest driver crashes the tenant's own VMMediumMar 12, 2020
- NVIDIA Multi-Instance GPU (MIG) partitioning: MIG gives each instance its own SM slice, L2 slice, memory slice andUnscored2020
- NVIDIA Multi-Instance GPU (MIG) partitioning: MIG gives each instance its own SM slice, L2 slice, memory slice andUnscored2020
201923
- NVIDIA NVFlash / NVUFlash / GPUModeSwitch kernel driver (nvflash.sys, nvflsh32/64.sys): NVIDIA's signed flashing driverMediumNov 18, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): The escape handler does not validate input buffer sizeHighNov 9, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): NULL dereference in the escape handlerHighNov 9, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Untrusted array index used in the escape handler: an unprivilegedHighNov 9, 2019
- NVIDIA vGPU Manager (vGPU plugin): The vGPU Manager grants a guest access to memory the guest does not own. That is theHighNov 9, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Uninitialised pointer use in nvlddmkm.sys. Local denial of serviceMediumNov 9, 2019
- NVIDIA vGPU Manager (vGPU plugin): A guest VM hands the vGPU Manager a wrongly sized buffer and drives the host into anMediumNov 9, 2019
- NVIDIA vGPU Manager (vGPU plugin): An index value from the guest is not validated by the vGPU plugin, letting oneMediumNov 9, 2019
- NVIDIA Windows GPU Display Driver, DirectX driver (shader compiler/runtime): A crafted shader reads out of bounds on anCriticalAug 6, 2019
- NVIDIA Windows GPU Display Driver, DirectX driver (shader compiler/runtime): A crafted shader overruns a shader-localCriticalAug 6, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Hard-link attack on the user-mode video driver's trace loggerHighAug 6, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): A kernel object created by the escape handler gets defaultHighAug 6, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): The escape handler relies on invariants that are not guaranteed, soMediumAug 6, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Unsynchronized shared state (static variables across threads)HighMay 10, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): The driver loads Windows system DLLs without validating pathMediumMay 10, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Out-of-bounds read in the DeviceIoControl handlerMediumMay 10, 2019
- NVIDIA Windows GPU Display Driver, 3D Vision stereo service: A privileged NVIDIA service opens files without checkingHighFeb 27, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): The context-creation DDI uses an untrusted array indexHighFeb 27, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): NULL dereference in the page-table DDI handler, reachable locallyHighFeb 27, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): NULL dereference in the virtual command submission handlerHighFeb 27, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Out-of-bounds kernel buffer access through the escape handlerHighFeb 27, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Same escape-handler length bug but with information disclosureHighFeb 27, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Resource leak in the escape handlerMediumFeb 27, 2019
20189
- NVIDIA GPU Display Driver, GPU hardware performance counters: GPU performance counters are readable by any local userMediumNov 13, 2018
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Any local account on a Windows GPU host can call the driver's escapeHighApr 2, 2018
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Out-of-bounds kernel read/write from an unprivileged escape callHighApr 2, 2018
- NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): NULL dereference in the kernel-mode layer reachableHighApr 2, 2018
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Same class as the other early-2018 escape bugs: an unprivilegedHighApr 2, 2018
- NVIDIA Windows GPU Display Driver, DirectX 10 user-mode driver: A crafted pixel shader writes into unallocated memoryHighApr 2, 2018
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): The escape handler exposes functionality that should neverMediumApr 2, 2018
- NVIDIA GPU Display Driver, DirectX and OpenGL user-mode drivers: A crafted pixel shader drives the user-mode driverMediumApr 2, 2018
- Univa Grid Engine (execd spooling with Docker jobs on root_squash): In the specific combination of Docker-based jobsCritical2018