CVE-2026-93175
kernel: drm/amd/display: Fix dangling pointer in CRTC reset function
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 17, 2026
Updated · November 1, 2026
Description
A flaw was found in the Linux kernel's display driver for AMD graphics, specifically within the drm/amd/display component. This vulnerability occurs in the amdgpu_dm_crtc_reset_state() function when it attempts to reset the display state. If a memory allocation fails during this process, the system can be left with a pointer to memory that has already been released, known as a dangling pointer. An attacker with local access could potentially exploit this to cause the system to crash or gain elevated privileges.
Statement
Red Hat rates this flaw as having a Moderate impact because exploitation requires local access and is contingent on memory allocation failures occurring during display state resets, which restricts the primary blast radius to denial of service. Standard enterprise server deployments are rarely exposed since they typically operate headless and do not load the AMD graphics display stack. Consequently, only systems equipped with AMD display hardware actively running the amdgpu driver are susceptible.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-825 · Expired Pointer Dereference