CVE Database›Document archive›CVE-2026-93175

CVE-2026-93175

kernel: drm/amd/display: Fix dangling pointer in CRTC reset function

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · September 17, 2026

Updated · November 1, 2026

Description

A flaw was found in the Linux kernel's display driver for AMD graphics, specifically within the drm/amd/display component. This vulnerability occurs in the amdgpu_dm_crtc_reset_state() function when it attempts to reset the display state. If a memory allocation fails during this process, the system can be left with a pointer to memory that has already been released, known as a dangling pointer. An attacker with local access could potentially exploit this to cause the system to crash or gain elevated privileges.

Statement

Red Hat rates this flaw as having a Moderate impact because exploitation requires local access and is contingent on memory allocation failures occurring during display state resets, which restricts the primary blast radius to denial of service. Standard enterprise server deployments are rarely exposed since they typically operate headless and do not load the AMD graphics display stack. Consequently, only systems equipped with AMD display hardware actively running the amdgpu driver are susceptible.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-825 · Expired Pointer Dereference