CVE-2026-43243
kernel: drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 6, 2026
Updated · October 30, 2026
Description
A flaw was found in the drm/amd/display component of the Linux kernel. A missing signal type check in the dcn401 get_phyd32clk_src function, when attempting to access link encoder (link enc) on a DisplayPort Interoperability and Compliance Association (DPIA) link, can lead to a system crash. This vulnerability could result in a Denial of Service (DoS).
Statement
This vulnerability is rated as having a Low impact because exploitation requires local access on systems equipped with specialized AMD graphics hardware and does not compromise system confidentiality or integrity. In standard Red Hat Enterprise Linux deployments, particularly headless server environments lacking AMD Display Core Next 4.0.1 architecture, the affected display driver code is never invoked. An attacker capable of triggering this condition can only cause a kernel crash, resulting in a denial of service without privilege escalation.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-1287 · Improper Validation of Specified Type of Input