CVE-2026-80704

A flaw was found in the Linux kernel's drm/amd/display component. This vulnerability arises from the improper use of an uninitialized logging context, which can lead to a NULL pointer dereference. A local attacker could potentially trigger this flaw, causing the system to crash and resulting in a Denial of Service (DoS).

A low impact NULL pointer dereference flaw was found in the Linux kernel's drm/amd/display driver. The AMD display clock source code uses calc_pll_cs->ctx->logger for logging in get_ss_info_from_atombios(), dce112_get_pix_clk_dividers(), and dcn3_get_pix_clk_dividers(), but calc_pll_cs->ctx is initialized only later in calc_pll_max_vco_construct(). Logging on those paths therefore dereferences a NULL context, which can crash the kernel and cause a local denial of service on systems with affected AMD display hardware. There is no impact on confidentiality or integrity and no path to privilege escalation. Red Hat assessed the impact as low because the flaw is not network reachable, requires local access to DRM/mode-setting paths on systems with affected AMD display hardware, and reliable triggering may depend on driver load or hardware initialization; this is a deliberate reduction from the CVSS 3.1 base score of 5.5 (Moderate). Red Hat Enterprise Linux 8, 9, and 10 (kernel and kernel-rt) and Red Hat In-Vehicle OS (kernel and kernel-ivos-qualcomm) are affected, with the fix deferred because this is a low impact, denial-of-service-only flaw; the residual risk of deferral is a possible system crash on systems with affected AMD display hardware. Red Hat Enterprise Linux 7 Extended Lifecycle Support is not affected because the vulnerable code is not present in that stream, and Red Hat Enterprise Linux 6 Extended Lifecycle Support is out of support scope.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.