{"id":"CVE-2026-98786","aliases":[],"cve":{"records":[{"id":"CVE-2026-98786","source":"Linux","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-25T10:25:14.370Z","published":"2026-10-18T15:48:22.989Z","modified":"2026-11-10T18:15:19.556Z"}],"publishers":[{"name":"Linux","role":"CNA","organizationId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","modified":"2026-11-10T18:15:19.556Z"}],"references":[{"url":"https://git.kernel.org/stable/c/0189f725242087679bc9f1bbf77ad086f56a72c8","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/5684a6c24c0d7c40ef2c4ccb3e4a64cffe76a791","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/daa0437fe5e451856aaf8fda602a9fc2105bbd54","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/217f64f348c90cba62164e7ff38e0ccf78a5ca09","tags":[],"source":"Linux"}],"weaknesses":[],"applicability":[{"source":"Linux","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.12.117"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.18.61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"7.2.10"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"7.3"}]}]}]}],"prioritization":[]},"title":"drm/amd/display: guard dc_sink dereferences in MST mode validation","titleSource":"Linux","descriptionSource":"Linux","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: guard dc_sink dereferences in MST mode validation\n\ndm_dp_mst_is_port_support_mode() reads\naconnector->dc_sink->dsc_caps... for the DSC branch-throughput check,\nand get_conv_frl_bw()'s HDMI-PCON FRL-bandwidth path reads\naconnector->dc_sink->edid_caps.max_frl_rate, both without a NULL\ncheck. dc_sink is cleared asynchronously on MST unplug, and both\nfunctions run from paths that the driver's own comments document as\nracing that teardown: the connector probe worker's ->mode_valid\ncallback and a compositor's atomic check, neither of which holds the\nMST manager lock that the teardown path uses. The former does have an\nexisting dsc_aux NULL check, but dsc_aux isn't reliably cleared in\nevery path that clears dc_sink, so it doesn't cover this.\n\nFail the port-support check and skip the FRL conversion path when the\nsink is already gone.\n\n(cherry picked from commit 7c3db8da4e039698ae198c870712428644e965c7)","score":null,"severity":"unknown","published":"2026-10-18T15:48:22.989Z","modified":"2026-11-10T18:15:19.556Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Linux","name":"Linux","platforms":[],"versions":[{"version":"f04d275d94e164d24516c32437c988a323018f63","status":"affected","lessThan":"0189f725242087679bc9f1bbf77ad086f56a72c8","versionType":"git"},{"version":"f04d275d94e164d24516c32437c988a323018f63","status":"affected","lessThan":"5684a6c24c0d7c40ef2c4ccb3e4a64cffe76a791","versionType":"git"},{"version":"f04d275d94e164d24516c32437c988a323018f63","status":"affected","lessThan":"daa0437fe5e451856aaf8fda602a9fc2105bbd54","versionType":"git"},{"version":"f04d275d94e164d24516c32437c988a323018f63","status":"affected","lessThan":"217f64f348c90cba62164e7ff38e0ccf78a5ca09","versionType":"git"}],"defaultStatus":"unaffected","cpes":[],"source":"Linux","url":"https://www.cve.org/CVERecord?id=CVE-2026-98786"},{"vendor":"Linux","name":"Linux","platforms":[],"versions":[{"version":"6.0","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.0","versionType":"semver"},{"version":"6.12.117","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.61","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.2.10","status":"unaffected","lessThanOrEqual":"7.2.*","versionType":"semver"},{"version":"7.3","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"defaultStatus":"affected","cpes":[],"source":"Linux","url":"https://www.cve.org/CVERecord?id=CVE-2026-98786"}],"remediation":[],"references":["https://git.kernel.org/stable/c/0189f725242087679bc9f1bbf77ad086f56a72c8","https://git.kernel.org/stable/c/5684a6c24c0d7c40ef2c4ccb3e4a64cffe76a791","https://git.kernel.org/stable/c/daa0437fe5e451856aaf8fda602a9fc2105bbd54","https://git.kernel.org/stable/c/217f64f348c90cba62164e7ff38e0ccf78a5ca09"],"sources":[{"name":"CVE","id":"CVE-2026-98786","modified":"2026-11-10T18:15:19.556Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-98786"}],"assessments":[],"sourceAffected":[],"observedAt":"2026-11-10T18:25:20.886Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T23:50:31.991Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-07T02:30:41.747Z","attemptedAt":"2026-11-07T02:30:41.747Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-07T02:30:40.946Z","attemptedAt":"2026-11-07T02:30:40.946Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-07T02:30:40.242Z","attemptedAt":"2026-11-07T02:30:40.242Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-07T02:30:40.288Z","attemptedAt":"2026-11-07T02:30:40.288Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-103871","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103871","modified":"Nov 6, 2026, 5:15:05 PM","checkedAt":"2026-11-07T02:30:40.242Z"},{"source":"FIRST EPSS","id":"CVE-2026-98786","url":"https://www.first.org/epss/","probability":0.00155,"percentile":0.04702,"date":"2026-11-06","checkedAt":"2026-11-07T02:30:40.288Z"},{"source":"GitHub Advisory Database","id":"GHSA-7r8j-xcf8-cxq6","url":"https://github.com/advisories/GHSA-7r8j-xcf8-cxq6","modified":"2026-11-06T18:35:59Z","checkedAt":"2026-11-07T02:30:40.946Z"},{"source":"NVD","id":"CVE-2026-98786","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98786","modified":"2026-11-06T18:18:30.337","checkedAt":"2026-11-07T02:30:41.747Z"}],"aiSummary":null}