CVE Database›Document archive›CVE-2026-31488

CVE-2026-31488

kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation

Loading…

Severity

Important

Red Hat Product Security

7.8

CVSS 3.1

Review impact separately from score.

Published · April 22, 2026

Updated · August 17, 2026

Description

A flaw was found in the Linux kernel's AMD display component. This vulnerability arises from incorrect validation of display mode changes during Display Stream Compression (DSC) processing. A local attacker could exploit this by initiating specific display configuration changes, which may lead to a memory leak and a use-after-free error. This could result in system crashes, denial of service, or potentially allow the attacker to gain elevated privileges.

Statement

This is an Important flaw in the Linux kernel's AMD display driver, where incorrect handling of display mode changes during Display Stream Compression (DSC) processing can lead to a memory leak and use-after-free. A local attacker with the ability to initiate specific display configuration changes could exploit this to cause a denial of service or potentially escalate privileges. The vulnerability requires local access to the system.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

CVSS / CWE

CVSS 3.1 · 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-1288 · Improper Validation of Consistency within Input