CVE-2026-68429

A flaw was found in the Linux kernel's DisplayPort DP Multi-Stream Transport MST module. A race condition can occur during hotplug or link-loss events when the MST topology is being torn down while the drmdpmsttopologyqueueprobe function is called. This can lead to spurious kernel warnings and...

Linux Distros Unpatched Vulnerability : CVE-2026-68429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/dpmst: Handle torn-down topology gracefully in drmdpmsttopologyqueueprobe A hotplug or link- loss event can tear down the MST topology setting mgr-mststate ...

CVE-2026-68241

A flaw was found in the Linux kernel's DisplayPort Multi-Stream Transport MST subsystem. An unbounded loop in the inteldpcheckmststatus function, responsible for servicing interrupts from a sink device, can lead to a system becoming unresponsive. A malicious or faulty DisplayPort MST sink device...

CVE-2026-68279

A flaw was found in the Linux kernel's DisplayPort DP Multi-Stream Transport MST subsystem. A malicious or misbehaving MST hub could send a specially crafted sideband message that causes an out-of-bounds read in the drmdpsidebandparseremotedpcdread and drmdpsidebandparseremotei2creadack functions...

CVE-2026-68278

A flaw was found in the Linux kernel's DisplayPort DP Multi-Stream Transport MST subsystem. This vulnerability involves multiple buffer overflows within the drmdpsidebandappendpayload function when handling data from connected devices. A physically connected, malicious DP MST device can exploit...

CVE-2026-68235

A flaw was found in the Linux kernel's AMD display drm/amd/display driver. This vulnerability occurs when handling DisplayPort Multi-Stream Transport MST for DCE8-class ASICs, where the system may incorrectly assign an analog encoder that lacks necessary DisplayPort functions. This misassignment...

CVE-2026-68277

In the Linux kernel, the following vulnerability has been resolved: drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers Three sideband reply parsers read 16-bit fields as: val = raw-msgidx msgidx+1; and check bounds only after the fact. When idx == raw-curlen, raw-msgidx+1 reads...

CVE-2026-68241

In the Linux kernel, the following vulnerability has been resolved: drm/i915/mst: limit DP MST ESI service loop The loop in inteldpcheckmststatus keeps servicing interrupts originating from the sink without bound. Add an upper bound to the new interrupts occurring during interrupt processing to n...

DEBIAN-CVE-2026-68235

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: dce100: skip non-DP stream encoders for DP MST On DCE8-class ASICs e.g. Bonaire, the resource pool contains digital DIG stream encoders plus one analog DAC encoder. When assigning a stream encoder for a second...

UBUNTU-CVE-2026-68235

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: dce100: skip non-DP stream encoders for DP MST On DCE8-class ASICs e.g. Bonaire, the resource pool contains digital DIG stream encoders plus one analog DAC encoder. When assigning a stream encoder for a second...

CVE-2026-68241

In the Linux kernel, the following vulnerability has been resolved: drm/i915/mst: limit DP MST ESI service loop The loop in inteldpcheckmststatus keeps servicing interrupts originating from the sink without bound. Add an upper bound to the new interrupts occurring during interrupt processing to n...

CVE-2025-71305

A flaw was found in the Linux kernel's DisplayPort Multi-Stream Transport MST subsystem. When a DisplayPort 2.1 monitor is disconnected, a timing issue can cause the Virtual Channel Packet Interval VCPI value to become zero. Subsequent operations attempting to use this zero value in a bit shift c...

SUSE CVE-2025-71305

In the Linux kernel, the following vulnerability has been resolved: drm/display/dpmst: Add protection against 0 vcpi When releasing a timeslot there is a slight chance we may end up with the wrong payload mask due to overflow if the delayeddestroywork ends up coming into play after a DP 2.1 monit...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: drm/dp: Fixed a divide-by-zero regression that occurred when unplugging a StarTech MSTDP122DP DisplayPort 1.2 MST hub using nouveau. Fixed a regression that occurred when using nouveau and unplugging a StarTech MSTDP122DP...

kernel: drm/dp_mst: Fix MST sideband message body length check

In the Linux kernel, the following vulnerability has been resolved: drm/dpmst: Fix MST sideband message body length check Fix the MST sideband message body length check, which must be at least 1 byte accounting for the message body CRC aka message data CRC at the end of the message. This fixes a...

PT-2024-21588 · Nouveau +4 · Nouveau +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.8.0-rc3+ Description: The vulnerability is related to a divide-by-zero regression on DP MST unplug with nouveau. It occurs when using nouveau and unplugging a StarTech MSTDP122DP DisplayPort 1.2 MST hub. The...