CVE-2026-43337: drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw()
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix NULL pointer dereference in dcn401inithw()
dcn401inithw() assumes that updatebwboundingbox() is valid when entering the update path. However, the existing condition:
((!fams2enable && updatebwboundingbox) || freqchanged)
does not guarantee this, as the freqchanged branch can evaluate to true independently of the callback pointer.
This can result in calling updatebwboundingbox() when it is NULL.
Fix this by separating the update condition from the pointer checks and ensuring the callback, dc->clkmgr, and bwparams are validated before use.
Fixes the below: ../dc/hwss/dcn401/dcn401hwseq.c:367 dcn401inithw() error: we previously assumed 'dc->respool->funcs->updatebwboundingbox' could be null (see line 362)
(cherry picked from commit 86117c5ab42f21562fedb0a64bffea3ee5fcd477)
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43337?
CVE-2026-43337 is classified as a medium severity vulnerability due to the potential for a NULL pointer dereference.
How do I fix CVE-2026-43337?
To mitigate CVE-2026-43337, update the Linux kernel to a version that includes the fix for the NULL pointer dereference.
What type of systems are affected by CVE-2026-43337?
CVE-2026-43337 affects systems running the Linux kernel with AMD display drivers.
What specific function is involved in CVE-2026-43337?
CVE-2026-43337 involves the dcn401_init_hw() function within the AMD display driver.
How can CVE-2026-43337 impact system stability?
CVE-2026-43337 may lead to system instability or crashes due to the NULL pointer dereference affecting driver functionality.