https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 16:54:47 +0000 https://vulnerability.circl.lu/vuln/cve-2026-72327 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/v3d: Reject invalid indirect BO handle in indirect CSD setup</p> <p>v3d_get_cpu_indirect_csd_params() looks up the indirect buffer object from a userspace-supplied handle but never checks the result. A bogus or stale handle makes drm_gem_object_lookup() return NULL, which is then stored in info-&gt;indirect and only dereferenced later when the indirect CSD job runs, turning a userspace mistake into a NULL pointer dereference in the kernel.</p> <p>Bail out with -ENOENT as soon as the lookup fails, so the bad handle is rejected at submission time.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/v3d: Reject invalid indirect BO handle in indirect CSD setup</p> <p>v3d_get_cpu_indirect_csd_params() looks up the indirect buffer object from a userspace-supplied handle but never checks the result. A bogus or stale handle makes drm_gem_object_lookup() return NULL, which is then stored in info-&gt;indirect and only dereferenced later when the indirect CSD job runs, turning a userspace mistake into a NULL pointer dereference in the kernel.</p> <p>Bail out with -ENOENT as soon as the lookup fails, so the bad handle is rejected at submission time.</p> https://vulnerability.circl.lu/vuln/cve-2026-72327