Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-98078.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-98078
Upstream
Published
2026-08-28T08:16:55Z
Modified
2026-08-30T05:26:50Z
Summary
CVE-2026-80704 affecting package kernel 6.6.150.1-1
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: use proper context for logging

The same as the rest of the code, getssinfofromatombios() uses calcpllcs->ctx->logger for logging. But calcpllcs->ctx is initialized only later in calcpllmaxvcoconstruct(). Therefore, any output using DCLOGSYNC() leads to a NULL pointer deference in getssinfofromatombios().

According to Sashiko, the very same problem exists in dce112getpixclkdividers() and dcn3getpixclkdividers() too.

To avoid accessing the NULL context, use clksrc->base.ctx->logger everywhere. That context in base is initialized earlier in dce110clksrcconstruct() and dce112clksrcconstruct(). Before getssinfofromatombios() or Sashiko's getpixclkdividers functions above are actually called. This is done by redefining DC_LOGGER to CTX->logger.

Before: dce110clksrcconstruct() did: -> sets clksrc->base.ctx = ctx; -> ssinfofromatombioscreate() -> getssinfofromatombios() <- uses calcpllcs->ctx # BOOM -> calcpllmaxvcoconstruct() <- sets calcpllcs->ctx

After: dce110clksrcconstruct() does: -> sets clksrc->base.ctx = ctx; -> ssinfofromatombioscreate() -> getssinfofromatombios() <- uses clk_src->base.ctx

(cherry picked from commit 6f16fcbb0c46a87e3d9685407e906573d60104b0)

References

Affected packages

Azure Linux:3 / kernel

Package

Name
kernel
Purl
pkg:rpm/azure-linux/kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
6.6.150.1-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-98078.json"