In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Remove sink usage from DPMS [Why] stream->sink is optional and… (CVE-2026-98926)

The vulnerability in the Linux kernel's AMD display driver (drm/amd/display) was due to the assumption that stream->sink is always valid, while it can be null. This led to unsafe dereferencing in DPMS (Display Power Management Signaling) sequences. The remediation involved replacing stream->sink->link with stream->link, adding assertions to USB4 bandwidth allocation where sink is mandatory, avoiding repeated resource accesses, and refactoring effective VPG calculation. These changes prevent null pointer dereferences and resource inconsistencies.

The vulnerability could cause kernel errors or instability due to null pointer dereferences in the AMD display driver during DPMS operations. There is no information about exploitation in the wild or direct security impact such as privilege escalation or data leakage.

A fix has been applied to the Linux kernel to address this issue. Users should update to the patched kernel version containing these changes. No additional mitigation steps are indicated.