A vulnerability in the Linux kernel's AMD display driver involves improper handling of preemption during phantom-plane memory allocation, which can… (CVE-2026-53285)
A vulnerability in the Linux kernel's AMD display driver involves improper handling of preemption during phantom-plane memory allocation, which can lead to a kernel crash. Specifically, the allocation occurs while local softirqs are disabled, triggering a BUG_ON condition. This issue has been resolved by wrapping the allocation call with a macro that enables preemption during the operation.
AI Analysis
Technical Summary
The vulnerability occurs in the Linux kernel's drm/amd/display component where the function dcn32_enable_phantom_plane() calls kvzalloc() to allocate approximately 335 KiB for dc_plane_state within a region where local softirqs are disabled due to the fpregs_lock() taken by DC_FP_START(). This violates the kernel's expectation that vmalloc should not be called in interrupt context, causing a BUG_ON(in_interrupt()) and resulting in a kernel crash (denial of service). The fix involves wrapping the dc_state_create_phantom_plane() call with DC_RUN_WITH_PREEMPTION_ENABLED() to allow preemption during memory allocation, preventing the crash.
Potential Impact
The vulnerability leads to a denial of service via a kernel crash when the phantom-plane allocation is triggered under the affected conditions. There is no impact on confidentiality or integrity. The crash occurs due to a kernel BUG_ON triggered by improper memory allocation context.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The fix involves applying the commit that wraps the phantom-plane allocation with DC_RUN_WITH_PREEMPTION_ENABLED() to enable preemption during the allocation. Until patched, avoid triggering the affected code path if possible.
A vulnerability in the Linux kernel's AMD display driver involves improper handling of preemption during phantom-plane memory allocation, which can… (CVE-2026-53285)
Description
A vulnerability in the Linux kernel's AMD display driver involves improper handling of preemption during phantom-plane memory allocation, which can lead to a kernel crash. Specifically, the allocation occurs while local softirqs are disabled, triggering a BUG_ON condition. This issue has been resolved by wrapping the allocation call with a macro that enables preemption during the operation.
CVSS v3.1
Score 5.5medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability occurs in the Linux kernel's drm/amd/display component where the function dcn32_enable_phantom_plane() calls kvzalloc() to allocate approximately 335 KiB for dc_plane_state within a region where local softirqs are disabled due to the fpregs_lock() taken by DC_FP_START(). This violates the kernel's expectation that vmalloc should not be called in interrupt context, causing a BUG_ON(in_interrupt()) and resulting in a kernel crash (denial of service). The fix involves wrapping the dc_state_create_phantom_plane() call with DC_RUN_WITH_PREEMPTION_ENABLED() to allow preemption during memory allocation, preventing the crash.
Potential Impact
The vulnerability leads to a denial of service via a kernel crash when the phantom-plane allocation is triggered under the affected conditions. There is no impact on confidentiality or integrity. The crash occurs due to a kernel BUG_ON triggered by improper memory allocation context.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The fix involves applying the commit that wraps the phantom-plane allocation with DC_RUN_WITH_PREEMPTION_ENABLED() to enable preemption during the allocation. Until patched, avoid triggering the affected code path if possible.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-hwwg-2jmx-c78q
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-53285"]
- Ecosystems
- []
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a4e4ed8c9d9e3dbe32883e8
Added to database: 07/08/2026, 13:21:28 UTC
Last enriched: 07/08/2026, 13:31:21 UTC
Last updated: 07/31/2026, 19:24:46 UTC
Views: 13
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.