CVE-2026-97431

A flaw was found in the Linux kernel's AMD display driver. When updating display streams, the driver improperly handles phantom streams that have already been destroyed, triggering a null pointer dereference. A local attacker can trigger this issue during display power management operations, leading to a kernel crash and a Denial of Service (DoS).

A NULL pointer dereference in the AMD DisplayPort link test path can occur when both a normal stream and its associated phantom stream are processed for DPMS on. Processing the normal stream may destroy the phantom stream, while the later operation still attempts to process the phantom entry and reaches invalid state. A connected DisplayPort monitor, dock, adapter, or test device may be able to reach this path by initiating a DP link test or retraining event when the affected phantom stream configuration is active. For the CVSS the PR:N value is used because an adjacent DisplayPort device does not need an authenticated user account or privileges on the victim system. The issue is adjacent rather than remotely reachable over an IP network. Base attack complexity is high because the failure depends on AMD display hardware, phantom stream usage, and a specific stream update sequence. Impact is denial of service through a kernel NULL pointer dereference or disruption of the graphics subsystem. There is no concrete evidence of an information disclosure, controlled write, or privilege escalation primitive.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.