CVE-2026-68236: drm/amd/display: set new_stream to NULL after release
drm/amd/display: set newstream to NULL after release
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.150.1-1 - Configuration
In drm/amd/display, set new_stream to NULL immediately after releasing it on the skip_modeset path in dm_update_crtc_state() (after dc_stream_release()), so later error paths do not double-release the same stream.
Linux kernel drm/amd/display new_stream pointer (set to NULL after release) = NULL
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68236?
CVE-2026-68236 has a risk severity rating of 41.
How do I fix CVE-2026-68236?
To fix CVE-2026-68236, ensure that the affected Linux kernel version is updated to include the patch that initializes new_stream to NULL after release.
What components are affected by CVE-2026-68236?
CVE-2026-68236 affects the Linux kernel's AMD display driver in the drm subsystem.
What type of vulnerability is CVE-2026-68236?
CVE-2026-68236 is classified as a Use After Free vulnerability.
When was CVE-2026-68236 published?
CVE-2026-68236 was published on August 10, 2026.