SB20260917143 - Out-of-bounds read in Linux kernel display amdgpu_dm driver

Description

This security bulletin contains information about 1 vulnerability.

1) Out-of-bounds read (CVE-ID: CVE-2026-89819)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service or disclose sensitive information.

The vulnerability exists due to an out-of-bounds read in the AMD display plane degamma LUT handling when processing a malformed AMD_PLANE_DEGAMMA_LUT property blob. A local user can set a malformed plane degamma LUT to cause a denial of service or disclose sensitive information.

The AMD_PLANE_DEGAMMA_LUT property is exposed only in builds with AMD_PRIVATE_COLOR defined.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/0b2615b8b54f58bbdf986dffb38cbc35214a5cc5
• https://git.kernel.org/stable/c/b10cc09b329245c6d95f8fa3e7f068575e3e0e9f
• https://git.kernel.org/stable/c/e4c3ab59021e7c146a84b6671f0d530972bd58b4
• https://git.kernel.org/stable/c/f6f04d8ae5725bcc893bdc62e3467efd97255c5b