CVE-2026-31488
kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · April 22, 2026
Updated · August 17, 2026
Description
A flaw was found in the Linux kernel's AMD display component. This vulnerability arises from incorrect validation of display mode changes during Display Stream Compression (DSC) processing. A local attacker could exploit this by initiating specific display configuration changes, which may lead to a memory leak and a use-after-free error. This could result in system crashes, denial of service, or potentially allow the attacker to gain elevated privileges.
Statement
This is an Important flaw in the Linux kernel's AMD display driver, where incorrect handling of display mode changes during Display Stream Compression (DSC) processing can lead to a memory leak and use-after-free. A local attacker with the ability to initiate specific display configuration changes could exploit this to cause a denial of service or potentially escalate privileges. The vulnerability requires local access to the system.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-1288 · Improper Validation of Consistency within Input