In the Linux kernel, the following vulnerability has been resolved: drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in… (CVE-2026-53058)
A vulnerability in the Linux kernel's drm/bridge cadence driver (cdns-mhdp8546-core) could lead to a NULL pointer dereference during error handling in atomic_enable(). This occurs because the mhdp connector is not set early enough, causing a mutex access on a NULL pointer in recovery paths. The issue has been resolved by setting the connector earlier in atomic_enable() to prevent this dereference.
AI Analysis
Technical Summary
The Linux kernel vulnerability (CVE-2026-53058) involves the drm/bridge cadence driver for the cdns-mhdp8546-core. When errors occur in cdns_mhdp_link_up() or cdns_mhdp_reg_read() during atomic_enable(), the code attempts to recover via cdns_mhdp_modeset_retry_fn(), which accesses a mutex through a NULL pointer due to the connector not being initialized early enough. The fix involves setting the mhdp->connector_ptr earlier in atomic_enable(), handling both cases where the DRM_BRIDGE_ATTACH_NO_CONNECTOR flag is set or not, thus avoiding the NULL pointer dereference in recovery paths.
Potential Impact
This vulnerability can cause a NULL pointer dereference leading to a denial of service (system crash or instability) in affected Linux kernel versions. There is no impact on confidentiality or integrity, only availability is affected.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to set the mhdp connector earlier in atomic_enable(), preventing the NULL pointer dereference. Users should apply the official kernel updates that include this fix. Patch status is not explicitly confirmed in the provided data; check the vendor or kernel mailing list advisories for the exact fixed versions and update accordingly.
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in… (CVE-2026-53058)
Description
A vulnerability in the Linux kernel's drm/bridge cadence driver (cdns-mhdp8546-core) could lead to a NULL pointer dereference during error handling in atomic_enable(). This occurs because the mhdp connector is not set early enough, causing a mutex access on a NULL pointer in recovery paths. The issue has been resolved by setting the connector earlier in atomic_enable() to prevent this dereference.
CVSS v3.1
Score 5.5medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel vulnerability (CVE-2026-53058) involves the drm/bridge cadence driver for the cdns-mhdp8546-core. When errors occur in cdns_mhdp_link_up() or cdns_mhdp_reg_read() during atomic_enable(), the code attempts to recover via cdns_mhdp_modeset_retry_fn(), which accesses a mutex through a NULL pointer due to the connector not being initialized early enough. The fix involves setting the mhdp->connector_ptr earlier in atomic_enable(), handling both cases where the DRM_BRIDGE_ATTACH_NO_CONNECTOR flag is set or not, thus avoiding the NULL pointer dereference in recovery paths.
Potential Impact
This vulnerability can cause a NULL pointer dereference leading to a denial of service (system crash or instability) in affected Linux kernel versions. There is no impact on confidentiality or integrity, only availability is affected.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to set the mhdp connector earlier in atomic_enable(), preventing the NULL pointer dereference. Users should apply the official kernel updates that include this fix. Patch status is not explicitly confirmed in the provided data; check the vendor or kernel mailing list advisories for the exact fixed versions and update accordingly.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-rc9r-g4hp-h8v7
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-53058"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a5fcf481010f89cc21529ec
Added to database: 07/21/2026, 19:58:00 UTC
Last enriched: 09/15/2026, 06:36:18 UTC
Last updated: 09/15/2026, 06:36:18 UTC
Views: 22
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.