PT-2026-69635

CVE-2026-68235

·

Published

2026-08-10

·

Updated

2026-10-13

Description by

CVSS 4.0
6.8
Medium
MetricsAV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.19 through 7.1.3
Description An issue exists in the drm/amd/display component on DCE8-class ASICs. When assigning a stream encoder for a second DisplayPort MST stream, the function dce100 find first free match stream enc for link() may incorrectly fall back to an analog DAC encoder if the preferred digital encoder is unavailable. Because the analog encoder lacks necessary DP hooks, such as dp set stream attribute, the subsequent atomic commit triggers a NULL function pointer dereference in link set dpms on(), resulting in a kernel crash.
Recommendations Update Linux kernel to a version where the fix is applied to ensure the system skips encoders without dp set stream attribute when using a DP signal.
Exploitability
Exploit
Fix
Vendors
Affected products
Related identifiers
OPENSUSE-SU-2026:21910-1
SUSE-SU-2026:23881-1
SUSE-SU-2026:23887-1
SUSE-SU-2026:23897-1
SUSE-SU-2026:23902-1
SUSE-SU-2026:4120-1
SUSE-SU-2026:4254-1
USN-8887-1
USN-8887-2
USN-8887-3
USN-8888-1
USN-8888-2
USN-8889-1
USN-8917-1
USN-8918-1
Found an issue in the description? Have something to add? Feel free to write us 👾