CVSS
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Описание
Оригинално описание
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dc_link NULL handling in HPD init amdgpu_dm_hpd_init() may see connectors without a valid dc_link. The code already checks dc_link for the polling decision, but later unconditionally dereferences it when setting up HPD interrupts. Assign dc_link early and skip connectors where it is NULL. Fixes the below: drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_irq.c:940 amdgpu_dm_hpd_init() error: we previously assumed 'dc_link' could be null (see line 931) drivers/gpu/drm/amd/amdgpu/../display/amdgpu_dm/amdgpu_dm_irq.c 923 /* 924 * Analog connectors may be hot-plugged unlike other connector 925 * types that don't support HPD. Only poll analog connectors. 926 */ 927 use_polling |= 928 amdgpu_dm_connector->dc_link && ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ The patch adds this NULL check but hopefully it can be removed 929 dc_connector_supports_analog(amdgpu_dm_connector->dc_link->link_id.id); 930 931 dc_link = amdgpu_dm_connector->dc_link; dc_link assigned here. 932 933 /* 934 * Get a base driver irq reference for hpd ints for the lifetime 935 * of dm. Note that only hpd interrupt types are registered with 936 * base driver; hpd_rx types aren't. IOW, amdgpu_irq_get/put on 937 * hpd_rx isn't available. DM currently controls hpd_rx 938 * explicitly with dc_interrupt_set() 939 */ --> 940 if (dc_link->irq_source_hpd != DC_IRQ_SOURCE_INVALID) { ^^^^^^^^^^^^^^^^^^^^^^^ If it's NULL then we are trouble because we dereference it here. 941 irq_type = dc_link-
Засегнати продукти
- Linux Linux: 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c преди d772e8570f19ac05fd9b11c8af86ada98f35f0c8; 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c преди 0965f1e775130e325e74152d867d2e8ce865fa05; 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c преди 1d15503e454bf117a0d0078332d48df86a41c828; 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c преди a490e4d3c9fed1e690c8de348416eea3a9f054ff; 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c преди 226a40c06a183abaeb7529a4f54d6c203bd14407
- Linux Linux: 4.15; преди 4.15; 6.6.160 до 6.6.*; 6.12.114 до 6.12.*; 6.18.57 до 6.18.*; 6.19.4 до 6.19.*; от 7.0 нататък
История
- 3 юни 2026 Публикувано
Други уязвимости в Linux Linux
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-46245
- https://nvd.nist.gov/vuln/detail/CVE-2026-46245
- https://git.kernel.org/stable/c/d772e8570f19ac05fd9b11c8af86ada98f35f0c8
- https://git.kernel.org/stable/c/0965f1e775130e325e74152d867d2e8ce865fa05
- https://git.kernel.org/stable/c/1d15503e454bf117a0d0078332d48df86a41c828
- https://git.kernel.org/stable/c/a490e4d3c9fed1e690c8de348416eea3a9f054ff
- https://git.kernel.org/stable/c/226a40c06a183abaeb7529a4f54d6c203bd14407