CVE-2026-90289

drm/amd/display: Resize MST HDCP per-connector arrays to 32

State: Published
Severity: 7.8 High
Published: Sep 17, 2026
Updated: Oct 30, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Resize MST HDCP per-connector arrays to 32

AMDGPU_DM_MAX_DISPLAY_INDEX is 31. It suggest a maximum number of 32 connectors. But the way it's used is like MAX_DISPLAY_COUNT. Hence we're off by one with DRM core, which supports a max of 32 connectors.

Rename AMDGPU_DM_MAX_DISPLAY_INDEX to AMDGPU_DM_MAX_DISPLAY_COUNT to match its actual use, and increase the size to 32 to match the originally intended size.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d90f97cb3821c47bdf773dcf6cade143773ec764 to before 1c22294c7d9b3b1c26a18ca4eca8c863a5a0d907Affected 82986fd631fa04bcedaefe11a6b3767601cbe84f to before decea8279bec5a35413b2cb8e36951cca308fac0Affected 82986fd631fa04bcedaefe11a6b3767601cbe84f to before ac490fea9fe74f9d9975c5d8250c8719750589cdAffected 82986fd631fa04bcedaefe11a6b3767601cbe84f to before 562d24ac214ba9530d88841088eb6adce5c537b5Affected 82986fd631fa04bcedaefe11a6b3767601cbe84f to before 0fa116a17b69a28712cdf209318e345b676d7f6cAffected 82986fd631fa04bcedaefe11a6b3767601cbe84f to before 261e0fe4e2c99f687114b64b10b98db964b475f4Affected 99c444d3c3c43db354b253d9bfac081073dcb484Affected 6.1.47 to before 6.1.191Affected 5.15.128 to before 5.16Affected
LinuxLinux	6.3Affected before 6.3Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.114 through 6.12.Not affected 6.18.57 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

d90f97cb3821c47bdf773dcf6cade143773ec764 to before 1c22294c7d9b3b1c26a18ca4eca8c863a5a0d907Affected
82986fd631fa04bcedaefe11a6b3767601cbe84f to before decea8279bec5a35413b2cb8e36951cca308fac0Affected
82986fd631fa04bcedaefe11a6b3767601cbe84f to before ac490fea9fe74f9d9975c5d8250c8719750589cdAffected
82986fd631fa04bcedaefe11a6b3767601cbe84f to before 562d24ac214ba9530d88841088eb6adce5c537b5Affected
82986fd631fa04bcedaefe11a6b3767601cbe84f to before 0fa116a17b69a28712cdf209318e345b676d7f6cAffected
82986fd631fa04bcedaefe11a6b3767601cbe84f to before 261e0fe4e2c99f687114b64b10b98db964b475f4Affected
99c444d3c3c43db354b253d9bfac081073dcb484Affected
6.1.47 to before 6.1.191Affected
5.15.128 to before 5.16Affected

LinuxLinux

6.3Affected
before 6.3Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.114 through 6.12.*Not affected
6.18.57 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.