CVE-2026-68429

drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()

State
Published
Severity
Not scored
Published
Aug 12, 2026
Updated
Aug 17, 2026
Reserved
Jul 30, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()

A hotplug or link-loss event can tear down the MST topology (setting mgr->mst_state = false and mgr->mst_primary = NULL) concurrently with a caller invoking drm_dp_mst_topology_queue_probe(). Since the check is already performed under mgr->lock, the condition is not a programming error but a valid race -- the topology was valid when the caller decided to call this function, but was torn down before the lock was acquired.

Replace the drm_WARN_ON() with a graceful early return. This eliminates spurious kernel warnings and the resulting compositor crashes observed when connecting/disconnecting DP MST monitors, while keeping the correct behavior of doing nothing when MST is not active. A drm_dbg_mst() trace is added so the skipped probe remains observable under MST debug logging.

The existing WARN_ON(mgr->mst_primary) in drm_dp_mst_topology_mgr_set_mst() already catches the case where the topology is initialized twice, so no diagnostic coverage is lost.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5f57a96e92c60f62da91d58ceb5e5acd40e7d594 to before b1d05cc61dfa6c4bd5e67855bec6a03e955f512dAffected
  • dbaeef363ea54f4c18112874b77503c72ba60fec to before 4ed6d08c4a59ee6a8cb806347f6d9873de5d229eAffected
  • dbaeef363ea54f4c18112874b77503c72ba60fec to before 8c6d84a54823cd839e6ce22af559925f1320c310Affected
  • dbaeef363ea54f4c18112874b77503c72ba60fec to before afdff9103818656627920c21822e48a6dae2906fAffected
  • dbaeef363ea54f4c18112874b77503c72ba60fec to before 613059875958e7b217b250ed14c3b189f9488421Affected
  • 6.6.86 to before 6.6.148Affected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.6.148 through 6.6.*Not affected
  • 6.12.101 through 6.12.*Not affected
  • 6.18.42 through 6.18.*Not affected
  • 7.1.6 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.