All vulnerabilities
CVE-2026-98926

Linux: drm/amd/display: Remove sink usage from DPMS

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in0b1eebd359685dd681f6e0df5540a5bb985a27bfAlso 8fa813b7fd1eccbed13e126166cf764f1f11a7d3, 7.2.9CVE List
Published23 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

  • 0b1eebd359685dd681f6e0df5540a5bb985a27bfLinuxCVE List
  • 8fa813b7fd1eccbed13e126166cf764f1f11a7d3LinuxCVE List
  • 7.2.9LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Remove sink usage from DPMS

[Why] stream->sink is optional and can be null, so should always be checked before dereference. Additionally, most of its usage in DPMS sequences is for stream->sink->link, which can be replaced with stream->link, as the two should always be the same.

[How]

  • Replace stream->sink->link in DPMS on/off
  • Add assert to USB4 BW allocation where sink is required
  • Avoid inconsistencies in resource access, e.g. don't repeat

stream->link after it was already saved to a local variable

  • Pull out effective VPG calculation to helper getter
  • Formatting fixes

Text from CVE List

Affected versions 5

  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 0b1eebd359685dd681f6e0df5540a5bb985a27bfCVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 8fa813b7fd1eccbed13e126166cf764f1f11a7d3CVE List
  • Linuxaffected: all versions before 7.2.9CVE List
  • Linuxunaffected: 7.2.9 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 2