CVE-2026-53138

A flaw was found in the Linux kernel's AMD display (drm/amd/display) driver. A malformed VBIOS image can cause unbounded processing loops, leading to an out-of-bounds read. This could result in information disclosure or a system crash.

This vulnerability is rated Moderate in impact because successful exploitation requires access to systems equipped with AMD display hardware and the ability to present a corrupted or crafted video firmware image at probe time. In standard Red Hat Enterprise Linux server deployments, dedicated AMD graphics adapters are uncommon or run headless, substantially limiting exposure. Because the flaw manifests during driver initialization without enabling remote code execution, the primary threat is a local denial of service or restricted kernel memory read.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.