In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend… (CVE-2026-98785)
Description
A vulnerability in the Linux kernel's AMD display driver was resolved by adding a NULL check for the dc_state_create_copy() function in the dm_suspend() routine. The function dc_state_create_copy() can return NULL on allocation failure, but dm_suspend() previously did not handle this correctly, leading to a NULL pointer dereference during GPU reset recovery in dm_resume(). The fix returns an error immediately if the copy fails, preventing the NULL cached state from causing a crash.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel AMD display driver had a vulnerability where dm_suspend() did not properly handle a NULL return from dc_state_create_copy(), which can occur on allocation failure. This caused dm_resume() to dereference a NULL pointer in link_enc_cfg_copy() and subsequent code, crashing the system during GPU reset recovery. The patch changes dm_suspend() to return -ENOMEM immediately if dc_state_create_copy() fails, aborting suspend and preventing the NULL pointer dereference on resume.
Potential Impact
If triggered, this vulnerability causes a NULL pointer dereference leading to a system crash during GPU reset recovery. This results in denial of service due to kernel crash or GPU reset failure. There is no indication of code execution or privilege escalation from the provided data.
Mitigation Recommendations
A fix has been applied to the Linux kernel AMD display driver to check for NULL returns from dc_state_create_copy() and abort suspend with an error if the copy fails. Users should update to the patched kernel version containing this fix. No other mitigation is indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-m7hp-r32v-xxxr
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-98785"]
Threat ID: 6ad520aa2cdf04f6569938d4
Added to database: 10/18/2026, 19:40:26 UTC
Last enriched: 10/18/2026, 22:20:50 UTC
Last updated: 10/18/2026, 22:20:50 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.