https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 09 Nov 2026 18:02:13 +0000 https://db.gcve.eu/vuln/cve-2026-98518 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/nouveau/dmem: pin VRAM for the whole registered range</p> <p>Commit c32287471077 (&#34;gpu/drm/nouveau: enable THP support for GPU memory migration&#34;) grew the device-private region that nouveau_dmem_chunk_alloc() registers from DMEM_CHUNK_SIZE to DMEM_CHUNK_SIZE * NR_CHUNKS, but left the VRAM buffer object backing that region at DMEM_CHUNK_SIZE.</p> <p>nouveau_dmem_page_addr() returns chunk-&gt;bo-&gt;offset plus the page&#39;s offset within the registered region, so every page past the first chunk resolves to VRAM outside the buffer object.</p> <p>Size the buffer object to the region it backs.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/nouveau/dmem: pin VRAM for the whole registered range</p> <p>Commit c32287471077 (&#34;gpu/drm/nouveau: enable THP support for GPU memory migration&#34;) grew the device-private region that nouveau_dmem_chunk_alloc() registers from DMEM_CHUNK_SIZE to DMEM_CHUNK_SIZE * NR_CHUNKS, but left the VRAM buffer object backing that region at DMEM_CHUNK_SIZE.</p> <p>nouveau_dmem_page_addr() returns chunk-&gt;bo-&gt;offset plus the page&#39;s offset within the registered region, so every page past the first chunk resolves to VRAM outside the buffer object.</p> <p>Size the buffer object to the region it backs.</p> https://db.gcve.eu/vuln/cve-2026-98518