PT-2026-46008 · Linux · Linux

Published

2026-06-03

·

Updated

2026-06-03

·

CVE-2026-46245

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix dc link NULL handling in HPD init
amdgpu dm hpd init() may see connectors without a valid dc link.
The code already checks dc link for the polling decision, but later unconditionally dereferences it when setting up HPD interrupts.
Assign dc link early and skip connectors where it is NULL.
Fixes the below: drivers/gpu/drm/amd/amdgpu/../display/amdgpu dm/amdgpu dm irq.c:940 amdgpu dm hpd init() error: we previously assumed 'dc link' could be null (see line 931)
drivers/gpu/drm/amd/amdgpu/../display/amdgpu dm/amdgpu dm irq.c 923 /* 924 * Analog connectors may be hot-plugged unlike other connector 925 * types that don't support HPD. Only poll analog connectors. 926 */ 927 use polling |= 928 amdgpu dm connector->dc link && ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ The patch adds this NULL check but hopefully it can be removed
929 dc connector supports analog(amdgpu dm connector->dc link->link id.id); 930 931 dc link = amdgpu dm connector->dc link;
dc link assigned here.
932 933 /* 934 * Get a base driver irq reference for hpd ints for the lifetime 935 * of dm. Note that only hpd interrupt types are registered with 936 * base driver; hpd rx types aren't. IOW, amdgpu irq get/put on 937 * hpd rx isn't available. DM currently controls hpd rx 938 * explicitly with dc interrupt set() 939 */ --> 940 if (dc link->irq source hpd != DC IRQ SOURCE INVALID) { ^^^^^^^^^^^^^^^^^^^^^^^ If it's NULL then we are trouble because we dereference it here.
941 irq type = dc link->irq source hpd - DC IRQ SOURCE HPD1; 942 /* 943 * TODO: There's a mismatch between mode info.num hpd 944 * and what bios reports as the # of connectors with hpd

Related Identifiers

CVE-2026-46245

Affected Products

Linux