CVE-2026-53138

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel within the drm/amd/display component. Record-chain walk loops in bios parser.c and bios parser2.c utilize for(;;) loops that only terminate upon encountering a 0xFF record type sentinel or a zero record size. A malformed VBIOS image lacking the terminator record can lead to unbounded iteration during probe time. This may result in hundreds of thousands of iterations when record size is 1, and can cause out-of-bounds reads during final iterations near the BIOS image boundary due to struct casts extending beyond the 2-byte header validated by GET IMAGE.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.