Investigate in your agent.

Turn this advisory into a focused investigation. Ask your agent to check your project’s versions, explain the evidence, and suggest a compatible fix.

Your agent needs remote MCP support and access to https://cve.new/mcp.

Read the setup guide

Skip to content
cve.newCreate a CVE report
Check your stack
CVE-2026-98785

drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend

Products / packages Linux

Published

Share

Severity and exploitation

Not in CISA KEVNo CVSS score

KEV coverage does not rule out exploitation.

KEV checked 14/11/2026, 22:05:30 UTC

Severity

unknown

CVSS measures technical severity, not the likelihood of an attack.

Known exploitation

Not listed in the checked CISA KEV catalog

Absence from CISA KEV does not rule out attacks.

Public exploit

Not established by this record

Missing evidence does not mean no public exploit exists.

Remediation

Fix status not established

No structured fix or guidance is available here. Check the latest publisher advisory.

What this means

The Linux kernel is affected by a vulnerability in the drm/amd/display module. The dc_state_create_copy() function can return NULL on allocation failure, causing a crash during GPU reset recovery. Affected versions include 5.15.165 to 5.15.224, 6.1.105 to 6.1.191, and 6.6.46 to 6.6.160.

Summarized by @cf/meta/llama-3.3-70b-instruct-fp8-fast. Verify details against the original sources.

Attack conditions

No attack-condition excerpt has been identified here. Review the full source description and references for authentication, network access, and configuration requirements.

Review supporting sources →

Affected versions

Check the exact model, release, and any platform requirements against your installation.

Linux · Linux

Linux

14 ranges
Linux version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

d0b8b23b9c2ebec693a36fea518d8f13493ad655 → before ed65678bb23a5f5040932960851ac39bdeafb765

git versions

83c7f509ef087041604e9572938f82e18b724c9d → before 0b24f9d4e6e8ab64da8f2ae85bd1790d0f6a596f

git versions

4cc2a94d96caeb3c975acdae7351c2f997c32175 → before 29302964ef583f3a57efc3c990bc0a71337bd3a4

git versions

8092aa3ab8f7b737a34b71f91492c676a843043a → before 686baa1f4ec43b33e39e3d4b4a4539a91d17e883

git versions

8092aa3ab8f7b737a34b71f91492c676a843043a → before 197946faa1b7968046ba475ae2f266847c6f51ed

git versions

8092aa3ab8f7b737a34b71f91492c676a843043a → before 7283b78ca07ce491984a63f6288f3f8de5bdcb22

git versions

8092aa3ab8f7b737a34b71f91492c676a843043a → before 015e72cde567d2450e282c2790773463156b2d0a

git versions

ea000e4b4ee5363997715531cb3d024b4e5d561c

git versions

1686675405d07f35eae7ff3d13a530034b899df2

git versions

5.15.165 → before 5.15.224

semver versions

6.1.105 → before 6.1.191

semver versions

6.6.46 → before 6.6.160

semver versions

5.10.258 → before 5.11

semver versions

6.10.5 → before 6.11

semver versions

unaffected

unknown

Other versions: unaffected

Linux · Linux

Linux

9 ranges
Linux version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

6.11

unaffected

0 → before 6.11

semver versions

5.15.224 → through 5.15.*

semver versions

6.1.191 → through 6.1.*

semver versions

6.6.160 → through 6.6.*

semver versions

6.12.113 → through 6.12.*

semver versions

6.18.56 → through 6.18.*

semver versions

7.2.10 → through 7.2.*

semver versions

7.3 → through *

original_commit_for_fix versions

unknown

Other versions: affected

Automatic dependency matching is unavailable for this record. Use the product evidence and publisher’s instructions to check your installation.

What to do

Compare your installed product and version with the affected versions above. A matching product name alone does not confirm exposure.

No structured fix or remediation guidance is available here. Check the full source description and vendor’s latest advisory for a patch or workaround; do not assume another version is safe.

cve.new guidance unless attributed to a publisher. This page does not inspect your installation.

Public exploit evidence

No public exploit reference is identified in the imported evidence. This is not a claim that no exploit exists.

Original source description

Read the full publisher description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend

dc_state_create_copy() can return NULL on allocation failure. dm_suspend() only conditionally skips dm_gpureset_toggle_interrupts() and continues execution, returning success. dm_resume() then dereferences the NULL cached_dc_state in link_enc_cfg_copy() and the following dc_state->stream_count loop, crashing during GPU reset recovery.

Return -ENOMEM immediately if the copy fails, so the caller aborts suspend instead of leaving a NULL cached state for resume.

(cherry picked from commit 84b6d7932fdd2857795a257f9f258562a3cddcab)

References

7 sources
git.kernel.org/stable/c/ed65678bb23a5f5040932960851ac39bdeafb765
Source referenceLinux
git.kernel.org/stable/c/0b24f9d4e6e8ab64da8f2ae85bd1790d0f6a596f
Source referenceLinux
git.kernel.org/stable/c/29302964ef583f3a57efc3c990bc0a71337bd3a4
Source referenceLinux
git.kernel.org/stable/c/686baa1f4ec43b33e39e3d4b4a4539a91d17e883
Source referenceLinux
git.kernel.org/stable/c/197946faa1b7968046ba475ae2f266847c6f51ed
Source referenceLinux
git.kernel.org/stable/c/7283b78ca07ce491984a63f6288f3f8de5bdcb22
Source referenceLinux
View 1 more references
git.kernel.org/stable/c/015e72cde567d2450e282c2790773463156b2d0a
Source referenceLinux

Inside the record

Evidence available

Package identity · not supplied
Version evidence
Remediation guidance · not supplied
Weakness classification · not supplied
Additional publishers · not supplied

Describes the evidence in this view, not whether the product is safe.

Original records

CVE-2026-98785

View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.

cve.new JSON →

Environment requirements

These conditions apply together as specified by the publisher. A matching product name alone does not establish exposure.

Linux · platform conditions

Any condition may hold

Vulnerable product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

From (inclusive): 5.15.165

Before: 5.15.224

Vulnerable product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

From (inclusive): 6.1.105

Before: 6.1.191

Vulnerable product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

From (inclusive): 6.6.46

Before: 6.6.160

Vulnerable product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

From (inclusive): 6.11

Before: 6.12.113

Vulnerable product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

From (inclusive): 6.11

Before: 6.18.56

Vulnerable product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

From (inclusive): 6.11

Before: 7.2.10

Vulnerable product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

From (inclusive): 6.11

Before: 7.3

Vulnerable product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

From (inclusive): 5.10.258

Vulnerable product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

From (inclusive): 6.10.5

Applicability preview
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.15.165",
            "versionEndExcluding": "5.15.224"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.1.105",
            "versionEndExcluding": "6.1.191"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.6.46",
            "versionEndExcluding": "6.6.160"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.11",
            "versionEndExcluding": "6.12.113"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.11",
            "versionEndExcluding": "6.18.56"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.11",
            "versionEndExcluding": "7.2.10"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.11",
            "versionEndExcluding": "7.3"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "5.10.258"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "6.10.5"
          }
        ]
      }
    ]
  }
]
Contributing organizations · 1
Linux

Assigning organization

2026-10-30

Timeline

All times UTC

  1. Advisory published

    Publication date supplied by the source.

  2. Source updated

    Latest modification date supplied by the source.

  3. Last imported by cve.new

    Latest catalog import, not the date we first saw this advisory.

What changed

Follow changes
No substantive changes have been recorded here yet. History starts when cve.new observes a change after tracking is enabled; earlier edits are not reconstructed.

Large field values are marked as truncated previews. Original source snapshots remain retained.