PT-2026-51952 · Linux · Linux

Published 2026-06-24 · Updated 2026-06-24 · CVE-2026-53058

NVD

In the Linux kernel, the following vulnerability has been resolved:

drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic enable()

In case if we get errors in cdns mhdp link up() or cdns mhdp reg read() in atomic enable, we will go to cdns mhdp modeset retry fn() and will hit NULL pointer while trying to access the mutex. We need the connector to be set before that. Unlike in legacy cases with flag !DRM BRIDGE ATTACH NO CONNECTOR, we do not have connector initialised in bridge attach(), so add the mhdp->connector ptr in device structure to handle both cases with DRM BRIDGE ATTACH NO CONNECTOR and !DRM BRIDGE ATTACH NO CONNECTOR, set it in atomic enable() earlier to avoid possible NULL pointer dereference in recovery paths like modeset retry fn() with the DRM BRIDGE ATTACH NO CONNECTOR flag set.

Related Identifiers

CVE-2026-53058

Affected Products

Linux

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-53058 · Security Note
• https://git.kernel.org/stable/c/a3611554e599d1a24b45fd8415bacb72ce861e4b · Note
• https://git.kernel.org/stable/c/1af3b42e08a957e53bab8e1897393fe0a27d9fbf · Note
• https://git.kernel.org/stable/c/5302015daf26ef6b48e067f2b86c9482ac19e015 · Note
• https://git.kernel.org/stable/c/cf2ac2cac8b319f89b3a3851ca0c5ffb6a549575 · Note
• https://git.kernel.org/stable/c/43d6508ddbf9fb974fbc359a033154f78c9d4c8b · Note