Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: check streams bounds before overflow The data-streams overflow check is performed after the buffer overflow has already occurred. Move the overflow check to occur before the write operation. As a side note, issuing...

hdcp-genkey

HDCP Key Generation Example This script implements a simple version of the HDCP key generation algorithm in Python using the leaked HDCP master key which is located in master-key.txt. Usage: generatekey.py options Options: -h, --help show this help message and exit -m FILE, --master=FILE load...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: Keep the NOCHDCP clock enabled Keeping the NOCHDCP clock enabled at all times helps prevent potential hangs caused by the NoC ADB400 port power-down handshake...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: drm/xe/hdcp: Add NULL check for mediagt in intelhdcpgsccheckstatus When media GT is disabled via configfs, there is no allocation for mediagt, which remains as NULL. In such scenarios, intelhdcpgsccheckstatus results in a kernel...

Astra Linux – vulnerability in linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: Add missing check for allocorderedworkqueue Add a check for the return value of allocorderedworkqueue, as it may return a NULL pointer and lead to a NULL pointer dereference in hdmihdcp.c and hdmihpd.c. Patchwork:...

Astra Linux – vulnerability in linux-5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid HDCP over-read and corruption Instead of reading the desired 5 bytes from the actual target field, the code was reading 8. This could result in a corrupted value if the trailing 3 bytes were non-zero;...

CVE-2026-90289

A flaw was found in the drm/amd/display component of the Linux kernel. An off-by-one error in the sizing of Multi-Stream Transport MST High-bandwidth Digital Content Protection HDCP per-connector arrays could lead to incorrect array handling. This issue stems from a discrepancy between the intend...

hdcp-genkey

Esempio di generazione della chiave HDCP Questo script implementa una versione semplice dell'algoritmo di generazione delle chiavi HDCP in Python utilizzando la chiave master HDCP trapelata che si trova in master-key.txt. Usage: generatekey.py options Options: -h, --help show this help message an...

Linux Distros Unpatched Vulnerability : CVE-2026-90289

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Resize MST HDCP per-connector arrays to 32 AMDGPUDMMAXDISPLAYINDEX is 31. It suggest a maximum number of 32 connectors. But the way it's used i...

CVE-2026-90289

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Resize MST HDCP per-connector arrays to 32 AMDGPUDMMAXDISPLAYINDEX is 31. It suggest a maximum number of 32 connectors. But the way it's used is like MAXDISPLAYCOUNT. Hence we're off by one with DRM core, which...

DEBIAN-CVE-2026-90289

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Resize MST HDCP per-connector arrays to 32 AMDGPUDMMAXDISPLAYINDEX is 31. It suggest a maximum number of 32 connectors. But the way it's used is like MAXDISPLAYCOUNT. Hence we're off by one with DRM core, which...

CVE-2026-90289

CVE-2026-90289 is a Linux kernel vulnerability in the drm/amd/display subsystem. The constant AMDGPU_DM_MAX_DISPLAY_INDEX was defined as 31 (implying 32 connectors) but used as a count, creating an off-by-one mismatch with the DRM core, which supports a maximum of 32 connectors. The fix renames t...

CVE-2026-90289 drm/amd/display: Resize MST HDCP per-connector arrays to 32

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Resize MST HDCP per-connector arrays to 32 AMDGPUDMMAXDISPLAYINDEX is 31. It suggest a maximum number of 32 connectors. But the way it's used is like MAXDISPLAYCOUNT. Hence we're off by one with DRM core, which...

CVE-2026-90289 drm/amd/display: Resize MST HDCP per-connector arrays to 32

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Resize MST HDCP per-connector arrays to 32 AMDGPUDMMAXDISPLAYINDEX is 31. It suggest a maximum number of 32 connectors. But the way it's used is like MAXDISPLAYCOUNT. Hence we're off by one with DRM core, which...

EUVD-2026-81882

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Resize MST HDCP per-connector arrays to 32 AMDGPUDMMAXDISPLAYINDEX is 31. It suggest a maximum number of 32 connectors. But the way it's used is like MAXDISPLAYCOUNT. Hence we're off by one with DRM core, which...

PT-2026-94637

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An off-by-one error exists in the drm/amd/display component. The constant AMDGPU DM MAX DISPLAY INDEX was set to 31, but it was utilized as a count rather than an index. This created a...

Linux kernel security vulnerabilities

A security vulnerability exists in the Linux kernel. It stems from a discrepancy of one element in the MST HDCP per-connector array size, which may lead to an out-of-bounds access...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: Added a check for the encoder in intelhdcpgetcapability. Sometimes during hotplug scenarios or suspend/resume scenarios, the encoder may not be initialized properly. To prevent null pointer dereferencing in the...

SUSE CVE-2026-89773

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip Update HDCP Config In Transition State Transition state does not have a valid dmstreamctx that should skip configuring HDCP routine. The routine is valid to go through only when a valid stream is created...

Linux Distros Unpatched Vulnerability : CVE-2026-89773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip Update HDCP Config In Transition State Transition state does not have ...