CVE-2026-74449

Source
https://cve.org/CVERecord?id=CVE-2026-74449
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74449.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-74449
Downstream
BELL (1)
DEBIAN (1)
openSUSE (1)
SUSE (6)
UBUNTU (1)
Related
Published
2026-08-15T12:26:54Z
Modified
2026-10-28T02:30:29Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport

If a plane reaches calculate_mcache_setting with a zero-area viewport, calculate_mcache_setting exits early with num_mcaches == 0 and mvmpg_width/height == 0. This will cause a divide-by-zero panic and can also cause an underflow on num_mcaches.

Fix this by changing calculate_mcache_setting to bool and adding guards after each calculate_mcache_row_bytes call. If num_mcaches or mvmpg_width/height is zero, return a false. Callers will propagate the failure as a rejected mode, which prevents the panic.

(cherry picked from commit 29c0f7c655f47bcbd575ff75e58480df6ec3c9da)

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74449.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
70839da6360500a82e4d5f78499284474cbed7c1
Fixed
70f5f4ddba0d2d89e77ec13b79cdcfbef33be0d9
Fixed
23a541c31b45fa813b33269376f6bd53535429a8
Fixed
1f93537881fd22712732a60ad12572a3fd40c0ec
Fixed
f327e389c07cfc3a2f6ff54f6214e1a52d457edc

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74449.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.11.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.57
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.8

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74449.json"