Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-53135

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs [Why & How] dp_sdp_message_debugfs_write() dereferences connector->base.state->crtc without checking for NULL. A connector can be connected but not bound to any CRTC (e.g. after hot-plug before the next atomic commit), causing a kernel crash when writing to the sdp_message debugfs node. The function also ignores the user-provided size argument and always pass
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:d1f095f0b86b7a5c82202ed9ef78a712d49fce8ac5ef35469d00024af8f20c61
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.2"},{"lessThan":"5.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f5efdab40012c0182eb45b743e5194a94e2e311b5daefe2241d7531862ee95c6 · sha256:6084c639443e65d8… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"ee9cfcf77a8e8af637396dc00966df5f701e661c","status":"affected","version":"c7ba3653e9773256b2b08508a2ed2ca28ea7566b","versionType":"git"},{"lessThan":"b781f90a9528555c709e59789550893581ef0be4","status":"affected","version":"c7ba3653e9773256b2b08508a2ed2ca28ea7566b","versionType":"git"},{"lessThan":"a2de1d71891a038a9346b2c1a72b88c8350f2479","status":"affected"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f5efdab40012c0182eb45b743e5194a94e2e311b5daefe2241d7531862ee95c6 · sha256:6084c639443e65d8… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.2"},{"lessThan":"5.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f5efdab40012c0182eb45b743e5194a94e2e311b5daefe2241d7531862ee95c6 · sha256:6084c639443e65d8… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"ee9cfcf77a8e8af637396dc00966df5f701e661c","status":"affected","version":"c7ba3653e9773256b2b08508a2ed2ca28ea7566b","versionType":"git"},{"lessThan":"b781f90a9528555c709e59789550893581ef0be4","status":"affected","version":"c7ba3653e9773256b2b08508a2ed2ca28ea7566b","versionType":"git"},{"lessThan":"a2de1d71891a038a9346b2c1a72b88c8350f2479","status":"affected"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f5efdab40012c0182eb45b743e5194a94e2e311b5daefe2241d7531862ee95c6 · sha256:6084c639443e65d8… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/7ae95c0275c330b5dbae806f8e431720edad776f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f5efdab40012c0182eb45b743e5194a94e2e311b5daefe2241d7531862ee95c6 · sha256:6084c639443e65d8… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/7fc4fab4acc307ad2903312c195872b2953d32c3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f5efdab40012c0182eb45b743e5194a94e2e311b5daefe2241d7531862ee95c6 · sha256:6084c639443e65d8… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/a2de1d71891a038a9346b2c1a72b88c8350f2479"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f5efdab40012c0182eb45b743e5194a94e2e311b5daefe2241d7531862ee95c6 · sha256:6084c639443e65d8… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/adf67034b1f61f7119295208085bfd43f85f56af"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f5efdab40012c0182eb45b743e5194a94e2e311b5daefe2241d7531862ee95c6 · sha256:6084c639443e65d8… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/b781f90a9528555c709e59789550893581ef0be4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f5efdab40012c0182eb45b743e5194a94e2e311b5daefe2241d7531862ee95c6 · sha256:6084c639443e65d8… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/bb6f705b73b5f191f14ad004e2c8c4b615806187"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f5efdab40012c0182eb45b743e5194a94e2e311b5daefe2241d7531862ee95c6 · sha256:6084c639443e65d8… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/c90954cdea4d6998ec345de0d840d030c145b89e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f5efdab40012c0182eb45b743e5194a94e2e311b5daefe2241d7531862ee95c6 · sha256:6084c639443e65d8… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/ee9cfcf77a8e8af637396dc00966df5f701e661c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f5efdab40012c0182eb45b743e5194a94e2e311b5daefe2241d7531862ee95c6 · sha256:6084c639443e65d8… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer