PT-2026-54798 · Linux · Linux

Publicado 2026-07-01 · Atualizado 2026-07-01 · CVE-2026-53330

Mitre

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix out-of-bounds read in dp get eq aux rd interval()

[Why & How] The aux rd interval array in struct dc lttpr caps is declared with MAX REPEATER CNT - 1 (7) elements, indexed 0..6. However, the offset parameter passed to dp get eq aux rd interval() can be as large as MAX REPEATER CNT (8) when a sink reports 8 LTTPR repeaters via DPCD. This leads to an out-of-bounds read of aux rd interval[7] when offset is 8.

Fix this by growing aux rd interval to MAX REPEATER CNT elements to accommodate the full range of valid repeater counts defined by the DP spec.

(cherry picked from commit a55a458a8df37a65ffda5cf721d554a8f74f6b04)

Identificadores relacionados

CVE-2026-53330

Produtos afetados

Linux

Referências · 4

• https://git.kernel.org/stable/c/e8b4d37eba05141ee01794fc6b7f2da808cee83b · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-53330 · Nota de Segurança
• https://git.kernel.org/stable/c/454d3b3d499c18373f8960d31aea48338a3ca9e0 · Nota
• https://git.kernel.org/stable/c/dc1490927d79fe9621e29f4a4f5d7b5ccb6aea3e · Nota