CVE-2026-98785

drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend

State: Published
Severity: Not scored
Published: Oct 18, 2026
Updated: Oct 30, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend

dc_state_create_copy() can return NULL on allocation failure. dm_suspend() only conditionally skips dm_gpureset_toggle_interrupts() and continues execution, returning success. dm_resume() then dereferences the NULL cached_dc_state in link_enc_cfg_copy() and the following dc_state->stream_count loop, crashing during GPU reset recovery.

Return -ENOMEM immediately if the copy fails, so the caller aborts suspend instead of leaving a NULL cached state for resume.

(cherry picked from commit 84b6d7932fdd2857795a257f9f258562a3cddcab)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d0b8b23b9c2ebec693a36fea518d8f13493ad655 to before ed65678bb23a5f5040932960851ac39bdeafb765Affected 83c7f509ef087041604e9572938f82e18b724c9d to before 0b24f9d4e6e8ab64da8f2ae85bd1790d0f6a596fAffected 4cc2a94d96caeb3c975acdae7351c2f997c32175 to before 29302964ef583f3a57efc3c990bc0a71337bd3a4Affected 8092aa3ab8f7b737a34b71f91492c676a843043a to before 686baa1f4ec43b33e39e3d4b4a4539a91d17e883Affected 8092aa3ab8f7b737a34b71f91492c676a843043a to before 197946faa1b7968046ba475ae2f266847c6f51edAffected 8092aa3ab8f7b737a34b71f91492c676a843043a to before 7283b78ca07ce491984a63f6288f3f8de5bdcb22Affected 8092aa3ab8f7b737a34b71f91492c676a843043a to before 015e72cde567d2450e282c2790773463156b2d0aAffected ea000e4b4ee5363997715531cb3d024b4e5d561cAffected 1686675405d07f35eae7ff3d13a530034b899df2Affected 5.15.165 to before 5.15.224Affected 6.1.105 to before 6.1.191Affected 6.6.46 to before 6.6.160Affected 5.10.258 to before 5.11Affected 6.10.5 to before 6.11Affected
LinuxLinux	6.11Affected before 6.11Not affected 5.15.224 through 5.15.Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.113 through 6.12.Not affected 6.18.56 through 6.18.Not affected 7.2.10 through 7.2.Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

d0b8b23b9c2ebec693a36fea518d8f13493ad655 to before ed65678bb23a5f5040932960851ac39bdeafb765Affected
83c7f509ef087041604e9572938f82e18b724c9d to before 0b24f9d4e6e8ab64da8f2ae85bd1790d0f6a596fAffected
4cc2a94d96caeb3c975acdae7351c2f997c32175 to before 29302964ef583f3a57efc3c990bc0a71337bd3a4Affected
8092aa3ab8f7b737a34b71f91492c676a843043a to before 686baa1f4ec43b33e39e3d4b4a4539a91d17e883Affected
8092aa3ab8f7b737a34b71f91492c676a843043a to before 197946faa1b7968046ba475ae2f266847c6f51edAffected
8092aa3ab8f7b737a34b71f91492c676a843043a to before 7283b78ca07ce491984a63f6288f3f8de5bdcb22Affected
8092aa3ab8f7b737a34b71f91492c676a843043a to before 015e72cde567d2450e282c2790773463156b2d0aAffected
ea000e4b4ee5363997715531cb3d024b4e5d561cAffected
1686675405d07f35eae7ff3d13a530034b899df2Affected
5.15.165 to before 5.15.224Affected
6.1.105 to before 6.1.191Affected
6.6.46 to before 6.6.160Affected
5.10.258 to before 5.11Affected
6.10.5 to before 6.11Affected

LinuxLinux

6.11Affected
before 6.11Not affected
5.15.224 through 5.15.*Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.113 through 6.12.*Not affected
6.18.56 through 6.18.*Not affected
7.2.10 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.