In the Linux kernel, the following vulnerability has been resolved: drm/bridge: Fix unlocked list_del in drm_bridge_add() When re-adding a bridge… (CVE-2026-98973)

The Linux kernel vulnerability (CVE-2026-98973) concerns the drm/bridge component where drm_bridge_add() removes an entry from bridge_lingering_list without holding the bridge_lock. Both bridge_list and bridge_lingering_list are protected by bridge_lock due to concurrent modifications by drm_bridge_remove() and __drm_bridge_free(), and are accessed by debugfs. Performing list_empty() and list_del_init() outside the lock can corrupt these lists. The fix ensures these operations occur while holding bridge_lock to maintain list integrity.

Improper locking during list operations can lead to corruption of internal kernel data structures managing drm bridges. This may cause system instability or crashes related to the graphics subsystem. No direct exploit or code execution impact is reported.

A fix has been implemented in the Linux kernel to ensure list operations in drm_bridge_add() are performed under the bridge_lock. Users should apply the official kernel update containing this fix once available. No additional mitigation steps are indicated.