drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend
Summary
| CVE | CVE-2026-98785 |
|---|---|
| State | PUBLISHED |
| Assigner | Linux |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-10-18 16:17:32 UTC |
| Updated | 2026-10-21 13:21:46 UTC |
| Description | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend dc_state_create_copy() can return NULL on allocation failure. dm_suspend() only conditionally skips dm_gpureset_toggle_interrupts() and continues execution, returning success. dm_resume() then dereferences the NULL cached_dc_state in link_enc_cfg_copy() and the following dc_state->stream_count loop, crashing during GPU reset recovery. Return -ENOMEM immediately if the copy fails, so the caller aborts suspend instead of leaving a NULL cached state for resume. (cherry picked from commit 84b6d7932fdd2857795a257f9f258562a3cddcab) |
Risk And Classification
EPSS: 0.001800000 probability, percentile 0.072430000 (date 2026-10-21)
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Linux | Linux | affected 4cc2a94d96caeb3c975acdae7351c2f997c32175 29302964ef583f3a57efc3c990bc0a71337bd3a4 git | Not specified |
| CNA | Linux | Linux | affected 8092aa3ab8f7b737a34b71f91492c676a843043a 686baa1f4ec43b33e39e3d4b4a4539a91d17e883 git | Not specified |
| CNA | Linux | Linux | affected 8092aa3ab8f7b737a34b71f91492c676a843043a 197946faa1b7968046ba475ae2f266847c6f51ed git | Not specified |
| CNA | Linux | Linux | affected 8092aa3ab8f7b737a34b71f91492c676a843043a 7283b78ca07ce491984a63f6288f3f8de5bdcb22 git | Not specified |
| CNA | Linux | Linux | affected 8092aa3ab8f7b737a34b71f91492c676a843043a 015e72cde567d2450e282c2790773463156b2d0a git | Not specified |
| CNA | Linux | Linux | affected ea000e4b4ee5363997715531cb3d024b4e5d561c git | Not specified |
| CNA | Linux | Linux | affected d0b8b23b9c2ebec693a36fea518d8f13493ad655 git | Not specified |
| CNA | Linux | Linux | affected 83c7f509ef087041604e9572938f82e18b724c9d git | Not specified |
| CNA | Linux | Linux | affected 1686675405d07f35eae7ff3d13a530034b899df2 git | Not specified |
| CNA | Linux | Linux | affected 6.6.46 6.6.160 semver | Not specified |
| CNA | Linux | Linux | affected 5.10.258 5.11 semver | Not specified |
| CNA | Linux | Linux | affected 5.15.165 5.16 semver | Not specified |
| CNA | Linux | Linux | affected 6.1.105 6.2 semver | Not specified |
| CNA | Linux | Linux | affected 6.10.5 6.11 semver | Not specified |
| CNA | Linux | Linux | affected 6.11 | Not specified |
| CNA | Linux | Linux | unaffected 6.11 semver | Not specified |
| CNA | Linux | Linux | unaffected 6.6.160 6.6.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.12.113 6.12.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.18.56 6.18.* semver | Not specified |
| CNA | Linux | Linux | unaffected 7.2.10 7.2.* semver | Not specified |
| CNA | Linux | Linux | unaffected 7.3 * original_commit_for_fix | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| git.kernel.org/stable/c/015e72cde567d2450e282c2790773463156b2d0a | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/29302964ef583f3a57efc3c990bc0a71337bd3a4 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/686baa1f4ec43b33e39e3d4b4a4539a91d17e883 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/197946faa1b7968046ba475ae2f266847c6f51ed | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/7283b78ca07ce491984a63f6288f3f8de5bdcb22 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.