CVE-2026-53313

drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths

State
Published
Severity
Not scored
Published
Jun 26, 2026
Updated
Oct 30, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths

In dc_dmub_srv_log_diagnostic_data() and dc_dmub_srv_enable_dpia_trace().

Both functions check:

if (!dc_dmub_srv || !dc_dmub_srv->dmub)

and then call DC_LOG_ERROR() inside that block.

DC_LOG_ERROR() uses dc_dmub_srv->ctx internally. So if dc_dmub_srv is NULL, the logging itself can dereference a NULL pointer and cause a crash.

Fix this by splitting the checks.

First check if dc_dmub_srv is NULL and return immediately. Then check dc_dmub_srv->dmub and log the error only when dc_dmub_srv is valid.

Fixes the below: ../display/dc/dc_dmub_srv.c:962 dc_dmub_srv_log_diagnostic_data() error: we previously assumed 'dc_dmub_srv' could be null (see line 961) ../display/dc/dc_dmub_srv.c:1167 dc_dmub_srv_enable_dpia_trace() error: we previously assumed 'dc_dmub_srv' could be null (see line 1166)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2631ac1ac328189031d1aefbbd4929050f72fb23 to before 2afedb8b9262df2a09e62ee7c22530a8c9df5934Affected
  • 2631ac1ac328189031d1aefbbd4929050f72fb23 to before 1cad9afbb2d559b738b83c498f9c1abdfd327e7fAffected
  • 2631ac1ac328189031d1aefbbd4929050f72fb23 to before a71fdbd6e8289e2725d33a9873833459f3b1824fAffected
  • 2631ac1ac328189031d1aefbbd4929050f72fb23 to before 2ab18de5ebb11c76bfc8087c5a09fbcccd0dea8aAffected
  • 2631ac1ac328189031d1aefbbd4929050f72fb23 to before b37a978e6d8c33fbfa4abc5dcca4c7cfc6d01f22Affected
  • 2631ac1ac328189031d1aefbbd4929050f72fb23 to before 4ae3e16f4b3bf64140f773629b765d605ee079a9Affected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.109 through 6.12.*Not affected
  • 6.18.50 through 6.18.*Not affected
  • 7.0.10 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.