Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98785

drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend dc_state_create_copy() can return NULL on allocation failure. dm_suspend() only conditionally skips dm_gpureset_toggle_interrupts() and continues execution, returning success. dm_resume() then dereferences the NULL cached_dc_state in link_enc_cfg_copy() and the following dc_state->stream_count loop, crashing during GPU reset recovery. Return -ENOMEM immediately if the copy fails, so the caller aborts suspend instead of leaving a NULL cached state for resume. (cherry picked from commit 84b6d7932fdd2857795a257f9f258562a3cddcab)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d0b8b23b9c2ebec693a36fea518d8f13493ad655 to < ed65678bb23a5f5040932960851ac39bdeafb765affected
  • 83c7f509ef087041604e9572938f82e18b724c9d to < 0b24f9d4e6e8ab64da8f2ae85bd1790d0f6a596faffected
  • 4cc2a94d96caeb3c975acdae7351c2f997c32175 to < 29302964ef583f3a57efc3c990bc0a71337bd3a4affected
  • 8092aa3ab8f7b737a34b71f91492c676a843043a to < 686baa1f4ec43b33e39e3d4b4a4539a91d17e883affected
  • 8092aa3ab8f7b737a34b71f91492c676a843043a to < 197946faa1b7968046ba475ae2f266847c6f51edaffected
  • 8092aa3ab8f7b737a34b71f91492c676a843043a to < 7283b78ca07ce491984a63f6288f3f8de5bdcb22affected
  • 8092aa3ab8f7b737a34b71f91492c676a843043a to < 015e72cde567d2450e282c2790773463156b2d0aaffected
  • ea000e4b4ee5363997715531cb3d024b4e5d561caffected
  • 1686675405d07f35eae7ff3d13a530034b899df2affected
  • 5.15.165 to < 5.15.224affected
  • 6.1.105 to < 6.1.191affected
  • 6.6.46 to < 6.6.160affected
  • 5.10.258 to < 5.11affected
  • 6.10.5 to < 6.11affected

Linux Linux

Default version status: affected

  • 6.11affected
  • 0 to < 6.11unaffected
  • 5.15.224 to ≤ 5.15.*unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.113 to ≤ 6.12.*unaffected
  • 6.18.56 to ≤ 6.18.*unaffected
  • 7.2.10 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References