Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-53138

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Bound VBIOS record-chain walk loops [Why & How] All record-chain walk loops in bios_parser.c and bios_parser2.c use for(;;) and only terminate on a 0xFF record_type sentinel or zero record_size. A malformed VBIOS image missing the terminator record causes unbounded iteration at probe time, potentially hundreds of thousands of iterations with record_size=1. In the final iterations near the BIOS image boundary,
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:ae33fd9366e659088e88a7239e1be7ab433598c0cc25935d5377da2fe5ac88fc
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/amd/display/dc/bios/bios_parser.c","drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c","drivers/gpu/drm/amd/display/dc/bios/bios_parser_helper.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"e94f5323c41f32a74160378c3b19850d1f203ad5","status":"affected","version":"4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c","versionType":"git"},{"lessThan":"04e271a952b8863bbafc99bd51aca4c32bff0e0d","status":"affected","version":"4562236b3bc0a28aeb6ee93b2d8a849a4…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:792e906b3bdec872d35a7f17200ff9931d42fcdfa58d40ee0985d37f71b92ff6 · sha256:dda6ada1d8664361… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/amd/display/dc/bios/bios_parser.c","drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c","drivers/gpu/drm/amd/display/dc/bios/bios_parser_helper.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.15"},{"lessThan":"4.15","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.260","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","versio…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:792e906b3bdec872d35a7f17200ff9931d42fcdfa58d40ee0985d37f71b92ff6 · sha256:dda6ada1d8664361… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/amd/display/dc/bios/bios_parser.c","drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c","drivers/gpu/drm/amd/display/dc/bios/bios_parser_helper.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"e94f5323c41f32a74160378c3b19850d1f203ad5","status":"affected","version":"4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c","versionType":"git"},{"lessThan":"04e271a952b8863bbafc99bd51aca4c32bff0e0d","status":"affected","version":"4562236b3bc0a28aeb6ee93b2d8a849a4…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:792e906b3bdec872d35a7f17200ff9931d42fcdfa58d40ee0985d37f71b92ff6 · sha256:dda6ada1d8664361… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/amd/display/dc/bios/bios_parser.c","drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c","drivers/gpu/drm/amd/display/dc/bios/bios_parser_helper.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.15"},{"lessThan":"4.15","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.260","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","versio…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:792e906b3bdec872d35a7f17200ff9931d42fcdfa58d40ee0985d37f71b92ff6 · sha256:dda6ada1d8664361… · /containers/cna/affected/1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/04e271a952b8863bbafc99bd51aca4c32bff0e0d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:792e906b3bdec872d35a7f17200ff9931d42fcdfa58d40ee0985d37f71b92ff6 · sha256:dda6ada1d8664361… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/0e56f460bddb397fa9a8e6faf7ae7eaa86953eb1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:792e906b3bdec872d35a7f17200ff9931d42fcdfa58d40ee0985d37f71b92ff6 · sha256:dda6ada1d8664361… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/2645e3caf7e013189da9c6ff621d006cca5a538b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:792e906b3bdec872d35a7f17200ff9931d42fcdfa58d40ee0985d37f71b92ff6 · sha256:dda6ada1d8664361… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/499c6b43a79dd684bddbd18fe8b2235aa2764db4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:792e906b3bdec872d35a7f17200ff9931d42fcdfa58d40ee0985d37f71b92ff6 · sha256:dda6ada1d8664361… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/6173cfea2f916e01c4f98e29cd654384a05e32a3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:792e906b3bdec872d35a7f17200ff9931d42fcdfa58d40ee0985d37f71b92ff6 · sha256:dda6ada1d8664361… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/6723188c42ca3b34a9fce634d7a0ecc9ccd5cd56"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:792e906b3bdec872d35a7f17200ff9931d42fcdfa58d40ee0985d37f71b92ff6 · sha256:dda6ada1d8664361… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/e94f5323c41f32a74160378c3b19850d1f203ad5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:792e906b3bdec872d35a7f17200ff9931d42fcdfa58d40ee0985d37f71b92ff6 · sha256:dda6ada1d8664361… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/ff287df16a1a58aca78b08d1f3ee09fc44da0351"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:792e906b3bdec872d35a7f17200ff9931d42fcdfa58d40ee0985d37f71b92ff6 · sha256:dda6ada1d8664361… · /containers/cna/references/7

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer