Back to CVE records
Not yet scoredPublished Oct 23, 2026

CVE-2026-98926drm/amd/display: Remove sink usage from DPMS

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Remove sink usage from DPMS [Why] stream->sink is optional and can be null, so should always be checked before dereference. Additionally, most of its usage in DPMS sequences is for stream->sink->link, which can be replaced with stream->link, as the two should always be the same. [How] * Replace stream->sink->link in DPMS on/off * Add assert to USB4 BW allocation where sink is required * Avoid inconsistencies in resource access, e.g. don't repeat stream->link after it was already saved to a local variable * Pull out effective VPG calculation to helper getter * Formatting fixes

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Received
Record last updated
Oct 26, 2026
First seen by InfoSec Signals
Oct 23, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
052fa7e8c9a92e3804ba9dba7c2550a9684d3441 builds before 0b1eebd359685dd681f6e0df5540a5bb985a27bf; 052fa7e8c9a92e3804ba9dba7c2550a9684d3441 builds before 8fa813b7fd1eccbed13e126166cf764f1f11a7d3
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.