Strix
26.1K

CVE-2026-68236

Unknown

Last modified

CVE-2026-68236 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: set new_stream to NULL after release In dm_update_crtc_state(), the skip_modeset path releases new_stream via dc_stream_release() but does not set the pointer to NULL. If a later error (e.g., color management failure) triggers the fail label, the error path calls dc_stream_release() again on the same dangling pointer, causing a double release and potential use-after-free. Fix this by setting new_stream to NULL after the initial release. (cherry picked from commit 99f3af19073b3ddbfd96e789124cce12c4277b28).

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: set new_stream to NULL after release In dm_update_crtc_state(), the skip_modeset path releases new_stream via dc_stream_release() but does not set the pointer to NULL. If a later error (e.g., color management failure) triggers the fail label, the error path calls dc_stream_release() again on the same dangling pointer, causing a double release and potential use-after-free. Fix this by setting new_stream to NULL after the initial release. (cherry picked from commit 99f3af19073b3ddbfd96e789124cce12c4277b28)

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f, < ba8bf1dcbb44773e7a0fd13b42925c644e0d5e76; >= 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f, < 5182e442e61397d446c36995b8f5676942d35b82; >= 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f, < 679f23f0a3606afcef1ffabd72222f00a54ad9e3; >= 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f, < 0676fecbb5242aa22c057e78326d6d6041db034c; >= 9b690ef3c70422cdcd0cf912db33f2c92ef4a53f, < 9fa26b9eed6195bf840f39ac183b9a6237548755
LinuxLinux4.15

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-68236?
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: set new_stream to NULL after release In dm_update_crtc_state(), the skip_modeset path releases new_stream via dc_stream_release() but does not set the pointer to NULL. If a later error (e.g., color management failure) triggers the fail label, the error path calls dc_stream_release() again on the same dangling pointer, causing a double release and potential use-after-free. Fix this by setting new_stream to NULL after the initial release. (cherry picked from commit 99f3af19073b3ddbfd96e789124cce12c4277b28)
How severe is CVE-2026-68236?
Severity scoring for CVE-2026-68236 is pending analysis.
How do I fix CVE-2026-68236?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-68236?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST