VulnerabilityPublished 1 Jul 2026Updated 21 Oct 2026

CVE-2026-53330: Linux kernel · drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()

Affects Linux kernelSource CVE Database V5

Not known to be exploited · fixed in e8b4d37eba05141ee01794fc6b7f2da808cee83b : update Linux kernel when convenient.

Data as of 26 Oct 2026, 21:17 UTC

Severity

Medium

Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

EPSS: 0.1% chance of exploitation in 30 days – higher than 2% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch: Available – fixed in e8b4d37eba05141ee01794fc6b7f2da808cee83b, dc1490927d79fe9621e29f4a4f5d7b5ccb6aea3e, a632474c793b7f2a9bbd3d8e3d0dd7d256989300 +2

Exploitation evidence

Disclosed: evidence found.
CVE published 1 Jul 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

Disclosed: The CVE record is public on cve.org. Its publication is t = 0.
Detectable: A public nuclei template can find exposed instances, for defenders and attackers alike.
Weaponised: Public exploit code exists in Metasploit or Exploit-DB, or CISA SSVC or the CVSS exploit maturity reports a public proof of concept.
Exploited in the wild: CISA KEV lists it, CISA SSVC rates exploitation active, or a source reports attacks.
Observed by OffSeq Mirage: OffSeq Mirage honeypot sensors recorded attack traffic for this CVE, or found exposed hosts without attack traffic.

Moments are spaced evenly, not to scale; a dashed line marks a gap of six months or more. Deltas count from t = 0. Sources that give only a date (CISA KEV, Exploit-DB, or a time of exactly 00:00Z) read “same day” rather than hours. Metasploit modules carry the flaw’s disclosure date, not their release date, and nuclei templates carry no date, so both appear above but not on the timeline.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

Product	Affected	Fixed in
LinuxLinux	Affected ≥ 8e5100a575433cc185a2e224280fbd873b6692dd, < e8b4d37eba05141ee01794fc6b7f2da808cee83b	Fixed in e8b4d37eba05141ee01794fc6b7f2da808cee83b
LinuxLinux	Affected ≥ 8e5100a575433cc185a2e224280fbd873b6692dd, < dc1490927d79fe9621e29f4a4f5d7b5ccb6aea3e	Fixed in dc1490927d79fe9621e29f4a4f5d7b5ccb6aea3e
LinuxLinux	Affected ≥ 8e5100a575433cc185a2e224280fbd873b6692dd, < a632474c793b7f2a9bbd3d8e3d0dd7d256989300	Fixed in a632474c793b7f2a9bbd3d8e3d0dd7d256989300
LinuxLinux	Affected ≥ 8e5100a575433cc185a2e224280fbd873b6692dd, < 454d3b3d499c18373f8960d31aea48338a3ca9e0	Fixed in 454d3b3d499c18373f8960d31aea48338a3ca9e0
LinuxLinux	Affected ≥ 8e5100a575433cc185a2e224280fbd873b6692dd, < 7c5f2d16a8f4464bf2a719ceb2316b8a6b87a3c0	Fixed in 7c5f2d16a8f4464bf2a719ceb2316b8a6b87a3c0
LinuxLinux	Affected =5.6	Fixed in–

AI-suggested

A fix is available and has been applied in multiple commits identified by their hashes. Users and administrators should update their Linux kernel to a version including these fixes to remediate the vulnerability.

Description

An out-of-bounds read vulnerability was found and fixed in the Linux kernel's drm/amd/display component. The issue involved an array indexing error in the dp_get_eq_aux_rd_interval() function, where the code could read beyond the bounds of the aux_rd_interval array when handling DisplayPort LTTPR repeaters. This was corrected by increasing the array size to match the maximum repeater count defined by the DisplayPort specification.

Impact

The out-of-bounds read could potentially lead to undefined behavior such as information disclosure or system instability in the kernel's display driver. However, no known exploits in the wild have been reported. The vulnerability affects the Linux kernel version 5.6 as specified.

Summary

The vulnerability in the Linux kernel's drm/amd/display subsystem was due to an out-of-bounds read in the dp_get_eq_aux_rd_interval() function. The aux_rd_interval array was declared with 7 elements (indexed 0 to 6), but the offset parameter could be as large as 8, leading to an out-of-bounds read at index 7. This occurred when a sink device reported 8 LTTPR repeaters via DPCD, exceeding the array bounds. The fix involved expanding the aux_rd_interval array to have 8 elements, aligning with the DP spec's maximum repeater count, thus preventing the out-of-bounds access.

References

Community reviews

Loading reviews…

Exploitation evidence

What to do

Affected software

Description

AI analysisMachine-generated, updated 26 Oct 2026, 21:17 UTC

Technical details

References

Community reviews

Related threats