CVE-2026-90035

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A division by zero occurs in the get estimated bw() function within the drm/amd/display component. This happens because the function divides by link->dpia bw alloc config.bw granularity, a value that is initialized to zero by reset bw alloc struct() and only updated after a DP TUNNELING BW ALLOC CAP CHANGED event. The DPCD interrupt handler, link dp dpia handle bw alloc status(), may call get estimated bw() when DP TUNNELING ESTIMATED BW CHANGED is set, even if a capability change has not yet occurred. A USB4/DPIA tunneling device reporting an estimated-bandwidth change before a capability change can trigger this issue in the IRQ path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.