VulnerabilityPublished 26 Jun 2026Updated 21 Oct 2026

CVE-2026-53285: Linux kernel · drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED

Affects Linux kernelSource CVE Database V5

Not known to be exploited · fixed in a8c1480bb066cf0f6e79129b7292e1c99ff68b9b : update Linux kernel when convenient.

Data as of 26 Oct 2026, 14:05 UTC

Severity

Unrated

Rated by Threat Radar · No CVSS score from NVD or the CNA

EPSS: 0.1% chance of exploitation in 30 days – higher than 1% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch: Available – fixed in a8c1480bb066cf0f6e79129b7292e1c99ff68b9b, 183182235f6d53bac62c6c39014738a54a68dfa6, 30bb2ec6695d62f63db4aa6179c4626834ed0cd6 +1

Exploitation evidence

Disclosed: evidence found.
CVE published 26 Jun 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

Disclosed: The CVE record is public on cve.org. Its publication is t = 0.
Detectable: A public nuclei template can find exposed instances, for defenders and attackers alike.
Weaponised: Public exploit code exists in Metasploit or Exploit-DB, or CISA SSVC or the CVSS exploit maturity reports a public proof of concept.
Exploited in the wild: CISA KEV lists it, CISA SSVC rates exploitation active, or a source reports attacks.
Observed by OffSeq Mirage: OffSeq Mirage honeypot sensors recorded attack traffic for this CVE, or found exposed hosts without attack traffic.

Moments are spaced evenly, not to scale; a dashed line marks a gap of six months or more. Deltas count from t = 0. Sources that give only a date (CISA KEV, Exploit-DB, or a time of exactly 00:00Z) read “same day” rather than hours. Metasploit modules carry the flaw’s disclosure date, not their release date, and nuclei templates carry no date, so both appear above but not on the timeline.

What to do

Upgrade Linux kernel to a8c1480bb066cf0f6e79129b7292e1c99ff68b9b, 183182235f6d53bac62c6c39014738a54a68dfa6, 30bb2ec6695d62f63db4aa6179c4626834ed0cd6 or 19e82047cb68bcde55791ee20178acd431609b8d.

Affected software

Product	Affected	Fixed in
LinuxLinux	Affected ≥ 235c67634230b0f9ad8c0185272fed36c892b1c4, < a8c1480bb066cf0f6e79129b7292e1c99ff68b9b	Fixed in a8c1480bb066cf0f6e79129b7292e1c99ff68b9b
LinuxLinux	Affected ≥ 235c67634230b0f9ad8c0185272fed36c892b1c4, < 183182235f6d53bac62c6c39014738a54a68dfa6	Fixed in 183182235f6d53bac62c6c39014738a54a68dfa6
LinuxLinux	Affected ≥ 235c67634230b0f9ad8c0185272fed36c892b1c4, < 30bb2ec6695d62f63db4aa6179c4626834ed0cd6	Fixed in 30bb2ec6695d62f63db4aa6179c4626834ed0cd6
LinuxLinux	Affected ≥ 235c67634230b0f9ad8c0185272fed36c892b1c4, < 19e82047cb68bcde55791ee20178acd431609b8d	Fixed in 19e82047cb68bcde55791ee20178acd431609b8d
LinuxLinux	Affected =6.0	Fixed in–

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED [Why] dcn32_validate_bandwidth() wraps dcn32_internal_validate_bw() with DC_FP_START()/DC_FP_END(). In x86 non-RT, DC_FP_START takes fpregs_lock(), which disables local softirqs. The DML1 path through dcn32_enable_phantom_plane() calls kvzalloc() to allocate ~335 KiB for dc_plane_state. This triggers the vmalloc path, which calls BUG_ON(in_interrupt()) because it's invoked within the FPU-enabled (softirq disabled) region, leading to a kernel crash. [How] Wrap the dc_state_create_phantom_plane() call with the DC_RUN_WITH_PREEMPTION_ENABLED() macro to allow preemption during this memory allocation. (cherry picked from commit 885ccbef7b94a8b38f69c4211c679021aa27ad11)

References

Community reviews

Loading reviews…