CVE-2026-93195: drm/bridge: synopsys: dw-dp: Support unregistering the AUX channel
In the Linux kernel, the following vulnerability has been resolved:
drm/bridge: synopsys: dw-dp: Support unregistering the AUX channel
The DisplayPort AUX channel gets initialized and registered during dwdpbind(), but it is never unregistered, which may lead to resource leaks and/or use-after-free.
Add the missing dwdpunbind() function to allow the users of the library to handle the required cleanup, i.e. unregister the AUX adapter.
Event History
Frequently Asked Questions
What systems are exposed to this issue?
Systems using the Linux kernel DesignWare DisplayPort bridge driver and its AUX channel initialization path may be exposed. The issue is tied to driver teardown after the AUX adapter has been registered.
When can the use-after-free or resource leak occur?
The risk arises when the driver is unbound or otherwise cleaned up after dw_dp_bind() registered the DisplayPort AUX channel. Without corresponding unregistration, the AUX adapter can retain resources or references beyond the driver’s lifetime.
What change addresses the issue?
The fix adds a dw_dp_unbind() function so library users can perform required cleanup, including unregistering the AUX adapter.