drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.19 % · percentile 8 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend dc_state_create_copy() can return NULL on allocation failure. dm_suspend() only conditionally skips dm_gpureset_toggle_interrupts() and continues execution, returning success. dm_resume() then dereferences the NULL cached_dc_state in link_enc_cfg_copy() and the following dc_state->stream_count loop, crashing during GPU reset recovery. Return -ENOMEM immediately if the copy fails, so the caller aborts suspend instead of leaving a NULL cached state for resume. (cherry picked from commit 84b6d7932fdd2857795a257f9f258562a3cddcab)
References
- https://git.kernel.org/stable/c/ed65678bb23a5f5040932960851ac39bdeafb765
- https://git.kernel.org/stable/c/0b24f9d4e6e8ab64da8f2ae85bd1790d0f6a596f
- https://git.kernel.org/stable/c/29302964ef583f3a57efc3c990bc0a71337bd3a4
- https://git.kernel.org/stable/c/686baa1f4ec43b33e39e3d4b4a4539a91d17e883
- https://git.kernel.org/stable/c/197946faa1b7968046ba475ae2f266847c6f51ed
- https://git.kernel.org/stable/c/7283b78ca07ce491984a63f6288f3f8de5bdcb22
- https://git.kernel.org/stable/c/015e72cde567d2450e282c2790773463156b2d0a
European references
- ENISA EUVD · EUVD-2026-103870
- GCVE · GCVE-0-2026-98785
CERT-FR advisories
- CERTFR-2026-AVI-1375 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected d0b8b23b9c2ebec693a36fea518d8f13493ad655 < ed65678bb23a5f5040932960851ac39bdeafb765 ; affected 83c7f509ef087041604e9572938f82e18b724c9d < 0b24f9d4e6e8ab64da8f2ae85bd1790d0f6a596f ; affected 4cc2a94d96caeb3c975acdae7351c2f997c32175 < 29302964ef583f3a57efc3c990bc0a71337bd3a4 ; affected 8092aa3ab8f7b737a34b71f91492c676a843043a < 686baa1f4ec43b33e39e3d4b4a4539a91d17e883 ; affected 8092aa3ab8f7b737a34b71f91492c676a843043a < 197946faa1b7968046ba475ae2f266847c6f51ed ; affected 8092aa3ab8f7b737a34b71f91492c676a843043a < 7283b78ca07ce491984a63f6288f3f8de5bdcb22 |
| Linux · Linux | affected 6.11 ; unaffected 0 < 6.11 ; unaffected 5.15.224 ≤ 5.15.* ; unaffected 6.1.191 ≤ 6.1.* ; unaffected 6.6.160 ≤ 6.6.* ; unaffected 6.12.113 ≤ 6.12.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |