-

CVE-2026-80542

drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank()

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank()

amdgpu_dm_crtc_set_vblank() dereferences acrtc_state->stream when
vblank is enabled/queried from DRM_IOCTL_MODE_CRTC_GET_SEQUENCE before
a stream is attached to it.

BUG: kernel NULL pointer dereference, address: 0000000000000008
RIP: amdgpu_dm_crtc_set_vblank+0x6b/0x4d0 [amdgpu]
Call Trace:
 drm_vblank_enable
 drm_vblank_get
 drm_crtc_get_sequence_ioctl
 drm_ioctl_kernel
 drm_ioctl

Reproduced by running VKCTS with WSI tests enabled on RADV.

Guard the enable path on acrtc_state->stream being non-NULL, matching
the existing checks in this function.

(cherry picked from commit 7b1b31bf6942e6f43509b48da23f8e27269aac39)
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 34d66bc7ff10e146a4cec76cf286979740a10954
Version < 5045fb4c70bfde36a05e0f41cf35ddfb6d85d3af
Status affected
Version 34d66bc7ff10e146a4cec76cf286979740a10954
Version < 4a6bc92fac30070511d66bcce4ed9b7dac983180
Status affected
Version 34d66bc7ff10e146a4cec76cf286979740a10954
Version < f2a1c4c6fe0a6fcde02e59dde546dba28d283635
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.18
Status affected
Version 0
Version < 6.18
Status unaffected
Version <= 6.18.*
Version 6.18.46
Status unaffected
Version <= 7.1.*
Version 7.1.10
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.061
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/5045fb4c70bfde36a05e0f41cf35ddfb6d85d3af
https://git.kernel.org/stable/c/4a6bc92fac30070511d66bcce4ed9b7dac983180
https://git.kernel.org/stable/c/f2a1c4c6fe0a6fcde02e59dde546dba28d283635