CVE-2026-74449

drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport

State
Published
Severity
7.8 High
Published
Aug 15, 2026
Updated
Oct 21, 2026
Reserved
Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport

If a plane reaches calculate_mcache_setting with a zero-area viewport, calculate_mcache_setting exits early with num_mcaches == 0 and mvmpg_width/height == 0. This will cause a divide-by-zero panic and can also cause an underflow on num_mcaches.

Fix this by changing calculate_mcache_setting to bool and adding guards after each calculate_mcache_row_bytes call. If num_mcaches or mvmpg_width/height is zero, return a false. Callers will propagate the failure as a rejected mode, which prevents the panic.

(cherry picked from commit 29c0f7c655f47bcbd575ff75e58480df6ec3c9da)

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 70839da6360500a82e4d5f78499284474cbed7c1 to before 70f5f4ddba0d2d89e77ec13b79cdcfbef33be0d9Affected
  • 70839da6360500a82e4d5f78499284474cbed7c1 to before 23a541c31b45fa813b33269376f6bd53535429a8Affected
  • 70839da6360500a82e4d5f78499284474cbed7c1 to before 1f93537881fd22712732a60ad12572a3fd40c0ecAffected
  • 70839da6360500a82e4d5f78499284474cbed7c1 to before f327e389c07cfc3a2f6ff54f6214e1a52d457edcAffected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.57 through 6.18.*Not affected
  • 7.1.8 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.