CVE-2026-89819

A flaw was found in the Linux kernel's drm/amd/display component. This vulnerability arises from insufficient validation of the plane degamma Look-Up Table (LUT) size. A local attacker, with access to the AMD_PLANE_DEGAMMA_LUT property (available on systems with AMD_PRIVATE_COLOR defined), could provide a malformed input. This could lead to a divide-by-zero error, resulting in a Denial of Service (DoS), or an out-of-bounds read, potentially causing information disclosure.

This vulnerability is rated as Moderate severity because exploitation requires an authenticated local user with direct access to Direct Rendering Manager (DRM) device interfaces on systems utilizing AMD graphics hardware. In typical Red Hat Enterprise Linux server installations, graphical display hardware is uncommon and unprivileged user access to rendering nodes is restricted by default, limiting potential exposure. While a malformed color lookup table can cause a local denial of service through a kernel crash or disclose memory via out-of-bounds reads, it does not facilitate arbitrary code execution or permit remote compromise.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.