Back to CVE records
High 7.8Published Dec 8, 2025

CVE-2023-53806drm/amd/display: populate subvp cmd info only for the top pipe

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: populate subvp cmd info only for the top pipe [Why] System restart observed while changing the display resolution to 8k with extended mode. Sytem restart was caused by a page fault. [How] When the driver populates subvp info it did it for both the pipes using vblank which caused an outof bounds array access causing the page fault. added checks to allow the top pipe only to fix this issue.

CVSS
7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Deferred
Record last updated
Aug 5, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c builds before 92e6c79acad4b96efeff261d27bdbd8089a7dd24; 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c builds before 375d192eb1f1d9229a6d994da7ba31f3582b106b; 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c builds before 9bb10b7aaec3b6278f9cc410c17dcaa129bbbbf0
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.