Critical Vulnerability in Linux Package: NULL Pointer Dereference in AMD Display Driver
Summary
DEBIAN-CVE-2026-97431: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid DPMS-on for phantom stream [Why & How] Calling dc_update_planes_and_stream separately for stream and its phantom stream causes a... Affects linux versions 6.1.106-1 – 7.2~rc7-1~exp1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware management and system functionality. It supports a wide range of hardware architectures and is known for its stability and performance. However, like any complex software, it is susceptible to vulnerabilities that can compromise system security and stability. This specific vulnerability affects the AMD display driver within the Linux kernel, which is responsible for managing graphics output on systems using AMD hardware.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the AMD display driver related to the handling of phantom streams. When the function dc_update_planes_and_stream is called separately for a stream and its phantom stream, it leads to a NULL pointer dereference. This occurs because the phantom stream is destroyed during the first function call, resulting in potential system crashes or instability. This vulnerability can be exploited by attackers to cause denial of service or to execute arbitrary code, depending on the system's configuration and usage.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is advisable to apply the patch as soon as it becomes available to mitigate risks associated with this issue.
Conclusion
The identified vulnerability in the Linux kernel's AMD display driver poses significant risks to system stability and security. Users are urged to update their systems to the patched version to protect against potential exploitation. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system integrity.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a NULL pointer dereference in the AMD display driver of the Linux kernel, which can lead to system crashes.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Exploitation of this vulnerability can result in denial of service or arbitrary code execution, depending on the system's configuration.
Yes, a patch is available for Debian 14 (Forky) in version 7.2.6-1. It is recommended to update to this version.
While there are no specific workarounds, it is crucial to monitor for updates and apply the patch as soon as possible to mitigate risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
