CVE-2026-68235
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
10/08/2026
Última modificación:
18/08/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/amd/display: dce100: skip non-DP stream encoders for DP MST<br />
<br />
On DCE8-class ASICs (e.g. Bonaire), the resource pool contains digital<br />
DIG stream encoders plus one analog DAC encoder. When assigning a stream<br />
encoder for a second DisplayPort MST stream, if the preferred digital<br />
encoder is already acquired, dce100_find_first_free_match_stream_enc_for_link()<br />
falls back to the first free pool entry. That entry may be the analog<br />
encoder, whose funcs table lacks DP hooks such as dp_set_stream_attribute.<br />
The subsequent atomic commit then dereferences NULL function pointers in<br />
link_set_dpms_on() and crashes.<br />
<br />
Skip encoders without dp_set_stream_attribute when the stream uses a DP<br />
signal (including MST). Use dc_is_dp_signal(stream->signal) for the MST<br />
fallback path instead of checking only the link connector signal.<br />
<br />
Tested on:<br />
- GPU: AMD Radeon R7 260X (Bonaire / DCE8)<br />
- Board: Supermicro C9X299-PG300<br />
- Setup: DP MST daisy chain, hotplug second monitor or have it connected on boot<br />
- Kernel: 7.1.3 (issue observed since 6.19)<br />
- Result: kernel oops without patch; dual monitors stable with patch<br />
<br />
(cherry picked from commit 28ec64943e3ee4d9b8d30cea61e380f1429953a8)



