CVE-2026-31460

A flaw was found in the drm/amd/display component of the Linux kernel. This vulnerability occurs because the system attempts to access extended backlight capabilities without first verifying if the pointer to these capabilities is valid, specifically when dealing with LVDS connectors. An attacker could potentially trigger a system crash, leading to a Denial of Service (DoS).

This vulnerability is rated as having a Low impact by Red Hat because triggering the null pointer dereference requires local access on systems equipped with specific AMD display hardware utilizing LVDS connections, resulting only in a localized denial of service (kernel crash). Most Red Hat Enterprise Linux server environments do not deploy AMD graphics devices with LVDS panels, substantially limiting real-world exposure. Confidentiality and data integrity remain unaffected, as the condition does not permit arbitrary code execution or privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.