Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-91326.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-91326
Upstream
Published
2026-06-26T20:17:24Z
Modified
2026-08-29T05:27:27Z
Summary
CVE-2026-53313 affecting package kernel 6.6.150.1-1
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Avoid NULL dereference in dcdmubsrv error paths

In dcdmubsrvlogdiagnosticdata() and dcdmubsrvenabledpiatrace().

Both functions check:

if (!dcdmubsrv || !dcdmubsrv->dmub)

and then call DCLOGERROR() inside that block.

DCLOGERROR() uses dcdmubsrv->ctx internally. So if dcdmubsrv is NULL, the logging itself can dereference a NULL pointer and cause a crash.

Fix this by splitting the checks.

First check if dcdmubsrv is NULL and return immediately. Then check dcdmubsrv->dmub and log the error only when dcdmubsrv is valid.

Fixes the below: ../display/dc/dcdmubsrv.c:962 dcdmubsrvlogdiagnosticdata() error: we previously assumed 'dcdmubsrv' could be null (see line 961) ../display/dc/dcdmubsrv.c:1167 dcdmubsrvenabledpiatrace() error: we previously assumed 'dcdmubsrv' could be null (see line 1166)

References

Affected packages

Azure Linux:3 / kernel

Package

Name
kernel
Purl
pkg:rpm/azure-linux/kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
6.6.150.1-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-91326.json"