VulnerabilityPublished 28 Oct 2026

CVE-2026-99214: Linux kernel · drm/vc4: hdmi: Move packet RAM enable to PM runtime

Source GCVE Database

Authoritative record:CVE-2026-99214

Not known to be exploited · fixed in 6b03e354526f6bad60ed3a7f08fec8b7d29d2f27 : update Linux kernel when convenient.

Data as of 28 Oct 2026, 13:30 UTC

Severity

Medium

Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD

Patch: Available – fixed in 6b03e354526f6bad60ed3a7f08fec8b7d29d2f27, 6a987992c78e2e04f71e685d1c589f8ea2151fa2, 3f57b34485dc01e5a2db60a89a6ae5439a897e53

Exploitation evidence

Disclosed: evidence found.
CVE published 28 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

Disclosed: The CVE record is public on cve.org. Its publication is t = 0.
Detectable: A public nuclei template can find exposed instances, for defenders and attackers alike.
Weaponised: Public exploit code exists in Metasploit or Exploit-DB, or CISA SSVC or the CVSS exploit maturity reports a public proof of concept.
Exploited in the wild: CISA KEV lists it, CISA SSVC rates exploitation active, or a source reports attacks.
Observed by OffSeq Mirage: OffSeq Mirage honeypot sensors recorded attack traffic for this CVE, or found exposed hosts without attack traffic.

Moments are spaced evenly, not to scale; a dashed line marks a gap of six months or more. Deltas count from t = 0. Sources that give only a date (CISA KEV, Exploit-DB, or a time of exactly 00:00Z) read “same day” rather than hours. Metasploit modules carry the flaw’s disclosure date, not their release date, and nuclei templates carry no date, so both appear above but not on the timeline.

ghsa-83m6-cmv8-x4pq

What to do

Upgrade Linux kernel to 6b03e354526f6bad60ed3a7f08fec8b7d29d2f27, 6a987992c78e2e04f71e685d1c589f8ea2151fa2 or 3f57b34485dc01e5a2db60a89a6ae5439a897e53.

Affected software

Product	Affected	Fixed in
LinuxLinux	Affected ≥ b47a72f30768ffe76e105b3e91ad7022003e8504, < 6b03e354526f6bad60ed3a7f08fec8b7d29d2f27	Fixed in 6b03e354526f6bad60ed3a7f08fec8b7d29d2f27
LinuxLinux	Affected ≥ b47a72f30768ffe76e105b3e91ad7022003e8504, < 6a987992c78e2e04f71e685d1c589f8ea2151fa2	Fixed in 6a987992c78e2e04f71e685d1c589f8ea2151fa2
LinuxLinux	Affected ≥ b47a72f30768ffe76e105b3e91ad7022003e8504, < 3f57b34485dc01e5a2db60a89a6ae5439a897e53	Fixed in 3f57b34485dc01e5a2db60a89a6ae5439a897e53
LinuxLinux	Affected =6.11	Fixed in–
Debiandebian/linux`pkg:deb/debian/linux`Other threats	Affected =6.11	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

A fix has been implemented in the Linux kernel by moving Packet RAM enablement to runtime power management hooks. Users should update to a Linux kernel version that includes this fix. No additional mitigation steps are indicated or required beyond applying the official patch.

Description

A vulnerability in the Linux kernel's drm/vc4 HDMI driver caused a kernel crash due to improper power management of Packet RAM during audio infoframe updates. The issue occurred when audio was triggered before video restoration, leading to attempts to write infoframes while Packet RAM was disabled. This has been resolved by moving Packet RAM enablement to runtime power management hooks.

References

Community reviews

Loading reviews…