In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: check dc state create copy() for NULL in dm suspend

dc state create copy() can return NULL on allocation failure. dm suspend() only conditionally skips dm gpureset toggle interrupts() and continues execution, returning success. dm resume() then dereferences the NULL cached dc state in link enc cfg copy() and the following dc state->stream count loop, crashing during GPU reset recovery.

Return -ENOMEM immediately if the copy fails, so the caller aborts suspend instead of leaving a NULL cached state for resume.

(cherry picked from commit 84b6d7932fdd2857795a257f9f258562a3cddcab)