drm/amd/display: Remove sink usage from DPMS
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 7.2.9
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
This vulnerability affects the Linux kernel's AMD display driver (amdgpu, under drm/amd/display), which handles display power management (DPMS) for AMD graphics hardware. The flaw involved dereferencing a display sink pointer that can be null, which could lead to a kernel crash or instability when the display is powered on or off.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Remove sink usage from DPMS [Why] stream->sink is optional and can be null, so should always be checked before dereference. Additionally, most of its usage in DPMS sequences is for stream->sink->link, which can be replaced with stream->link, as the two should always be the same. [How] • Replace stream->sink->link in DPMS on/off • Add assert to USB4 BW allocation where sink is required • Avoid inconsistencies in resource access, e.g. don't repeat stream->link after it was already saved to a local variable • Pull out effective VPG calculation to helper getter • Formatting fixes
Timeline
- CVE published
- First seen by cve.now
- Record last updated
Affected versions
- Linux Linux
From 052fa7e8c9a92e3804ba9dba7c2550a9684d3441 · fixed in 0b1eebd359685dd681f6e0df5540a5bb985a27bf; From 052fa7e8c9a92e3804ba9dba7c2550a9684d3441 · fixed in 8fa813b7fd1eccbed13e126166cf764f1f11a7d3
- Linux Linux
5.3
- KernelLinux
fixed in 7.2.9