{"id":"CVE-2026-98926","kind":"vulnerability","aliases":["CVE-2026-98926"],"related":[],"title":"Linux kernel AMD display driver: DPMS path may dereference a null sink","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Remove sink usage from DPMS\n\n[Why]\nstream->sink is optional and can be null, so should always be checked\nbefore dereference. Additionally, most of its usage in DPMS sequences\nis for stream->sink->link, which can be replaced with stream->link,\nas the two should always be the same.\n\n[How]\n* Replace stream->sink->link in DPMS on/off\n* Add assert to USB4 BW allocation where sink is required\n* Avoid inconsistencies in resource access, e.g. don't repeat\nstream->link after it was already saved to a local variable\n* Pull out effective VPG calculation to helper getter\n* Formatting fixes","summary":"A Linux kernel fix in the AMD display driver removes use of a stream sink pointer during display power state changes, because that pointer can be null and was dereferenced without checks. The sources describe a robustness fix and do not state what an attacker gets from the unpatched code.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd-gpu","amdgpu","infrastructure","linux-kernel"],"not_affected_if":["no-amd-gpu"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-23T13:17:13+00:00","first_seen_at":"2026-10-23T21:57:33+00:00","triaged_at":"2026-10-25T04:58:15+00:00","updated_at":"2026-10-25T04:58:15+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-25T04:58:15Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Linux kernel AMD display driver: DPMS path may dereference a null sink","impact":"low","summary":"A Linux kernel fix in the AMD display driver removes use of a stream sink pointer during display power state changes, because that pointer can be null and was dereferenced without checks. The sources describe a robustness fix and do not state what an attacker gets from the unpatched code.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","amd-gpu","amdgpu"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unknown; the sources do not say what an attacker gets","analyst_note":"Check the kernel.org stable commit and the NVD entry for CVSS, affected kernel version ranges and whether a null dereference leads to a crash or more.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["no-amd-gpu"],"who_is_affected":"Systems running a Linux kernel with the AMD display (amdgpu DRM) driver, which is used on AMD graphics hardware. The sources do not say which kernel versions were affected or whether the flaw is reachable by an unprivileged user.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000576,"input_tokens":3455,"output_tokens":460,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-98926':15A,18A 'access':159C 'add':145C 'addit':109C 'alloc':150C 'alreadi':169C 'alway':104C,133C 'amd':3A,20B,33B 'amd-gpu':19B 'amdgpu':22B 'assert':146C 'attack':71B 'avoid':155C 'bw':149C 'calcul':179C 'chang':47B 'check':58B,106C 'code':76B 'cve':13A,16A 'derefer':9A,108C 'dereferenc':56B 'describ':61B 'display':4A,34B,44B 'dpms':6A,92C,115C,143C 'driver':5A,35B 'drm/amd/display':87C 'e.g':160C 'effect':177C 'fix':30B,64B,184C 'follow':82C 'format':183C 'get':72B 'getter':182C 'gpu':21B 'helper':181C 'inconsist':156C 'infrastructur':23B 'kernel':2A,26B,29B,80C 'link':121C,128C,141C,165C 'linux':1A,25B,28B,79C 'linux-kernel':24B 'local':173C 'may':8A 'null':11A,53B,101C 'on/off':144C 'option':97C 'path':7A 'pointer':42B,50B 'power':45B 'pull':175C 'remov':36B,88C 'repeat':163C 'replac':125C,138C 'requir':154C 'resolv':86C 'resourc':158C 'robust':63B 'save':170C 'sequenc':116C 'sink':12A,41B,89C,95C,120C,140C,152C 'sourc':60B 'state':46B,68B 'stream':40B,94C,119C,127C,139C,164C 'two':131C 'unpatch':75B 'usag':90C,113C 'usb4':148C 'use':37B 'variabl':174C 'vpg':178C 'vulner':83C 'without':57B","nicknames":[],"mitigations":[],"who_affected":"Systems running a Linux kernel with the AMD display (amdgpu DRM) driver, which is used on AMD graphics hardware. The sources do not say which kernel versions were affected or whether the flaw is reachable by an unprivileged user.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-23T13:17:13+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98926","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98926","severity":null,"published_at":"2026-10-23T13:17:13+00:00","modified_at":"2026-10-23T13:17:13+00:00","first_seen_at":"2026-10-23T21:57:33+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}