AMD

Multiple security vulnerabilities in AMD processors and Radeon graphics hardware could enable an attacker to escalate privileges, execute arbitrary code, bypass security controls, manipulate or disclose data, or induce a denial-of-service state.

The Xen Project has updated security advisory XSA-525 to address Transient Scheduler Attacks (TSA) on AMD Zen 5 processors and disclose a new TSA-Fill variant affecting x86 architectures.

An information disclosure vulnerability in AMD Zen processors allows an authorized local attacker to disclose information due to processor optimization removal or modification of security-critical code.

AMD has disclosed a vulnerability in certain IOMMUs where the hardware performs out-of-bounds reads from the Device Table beyond the size chosen by the OS or Hypervisor.

An information disclosure vulnerability in AMD Zen processors allows an authorized attacker to disclose information locally due to processor optimization removal or modification of security-critical code.

An information disclosure vulnerability in AMD Zen processors allows an authorized local attacker to access sensitive information.

A 32-bit integer overflow vulnerability in the AMD KFD kernel driver allows for potential memory corruption during CWSR size calculations.

CVE-2026-68364 identifies a deadlock vulnerability in the AMD Linux kernel display driver's dc_lock mechanism during suspend, potentially enabling a local denial-of-service.

CVE-2026-68256 describes a memory reference leak in the Linux kernel drm/amd/display driver occurring during specific DP alt mode timeout conditions.

A memory management flaw in the AMD display driver (drm/amd/display) for the Linux kernel allows for improper handling of DisplayPort Multi-Stream Transport (DP MST) configurations.

A vulnerability, CVE-2026-64097, affects the `drm/amd/display` module in the Linux kernel due to insufficient validation of GPIO pin LUT table size, potentially leading to system instability or other security impacts on Linux systems utilizing AMD display drivers.

CVE-2026-46174 describes a vulnerability in AMD Zen2 processors related to improper isolation of shared resources within the operation cache, potentially leading to information disclosure or other security impacts.

Multiple vulnerabilities in AMD EPYC, Athlon, and Ryzen processors can be exploited by an attacker to execute arbitrary code, escalate privileges, bypass security measures, cause a denial-of-service condition, disclose sensitive information, or manipulate data.