CVE-2026-90289

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Resize MST HDCP per-connector arrays to 32

AMDGPU_DM_MAX_DISPLAY_INDEX is 31. It suggest a maximum number of 32 connectors. But the way it's used is like MAX_DISPLAY_COUNT. Hence we're off by one with DRM core, which supports a max of 32 connectors.

Rename AMDGPU_DM_MAX_DISPLAY_INDEX to AMDGPU_DM_MAX_DISPLAY_COUNT to match its actual use, and increase the size to 32 to match the originally intended size.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux82986fd631fa04bcedaefe11a6b3767601cbe84f < 0fa116a17b69a28712cdf209318e345b676d7f6caffected
LinuxLinux82986fd631fa04bcedaefe11a6b3767601cbe84f < 261e0fe4e2c99f687114b64b10b98db964b475f4affected
LinuxLinux99c444d3c3c43db354b253d9bfac081073dcb484affected
LinuxLinuxd90f97cb3821c47bdf773dcf6cade143773ec764affected
LinuxLinux5.15.128 < 5.16affected
LinuxLinux6.1.47 < 6.2affected
LinuxLinux6.3affected
LinuxLinux0 < 6.3unaffected
LinuxLinux7.2.6 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References