SB20260918367 - NULL pointer dereference in Linux kernel drm sun4i driver
Published: September 18, 2026
Security Bulletin ID
SB20260918367
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2026-90297)
CWE-ID: CWE-476 - NULL Pointer Dereference
CVSSv4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to improper error handling in sun4i_crtc_init() when initializing display layers. A local user can trigger a layer initialization failure to cause a denial of service.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/1882112124a642de7571fbf354fa1929decbb3ef
- https://git.kernel.org/stable/c/2bb3169788f8296c8fc1e0d4fa6f1c6367cd5829
- https://git.kernel.org/stable/c/65bc02fec98e4e1d7d59d86cf2ddf8fd73dacb89
- https://git.kernel.org/stable/c/7061ff05ed4a3cf16e83f7e3ad09cbd212508a32
- https://git.kernel.org/stable/c/8f32af44d43332c02198752e596df00659bf4354
- https://git.kernel.org/stable/c/aaf812960fb5ade24be7a1d8fea27a1ffc458c30
- https://git.kernel.org/stable/c/c0d3219ffd4c0d42295e0dc949856067b7818b71
- https://git.kernel.org/stable/c/e216d6168f25a69e5ae5b981ee73b3a860a46441