CVE-2026-53330
- Source
- https://cve.org/CVERecord?id=CVE-2026-53330
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-53330.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-53330
- Downstream
- Published
- 2026-07-01T13:32:15.160Z
- Modified
- 2026-07-16T03:32:43.654396080Z
- Summary
- drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix out-of-bounds read in dpgeteqauxrd_interval()
[Why & How] The auxrdinterval array in struct dclttprcaps is declared with MAXREPEATERCNT - 1 (7) elements, indexed 0..6. However, the offset parameter passed to dpgeteqauxrdinterval() can be as large as MAXREPEATERCNT (8) when a sink reports 8 LTTPR repeaters via DPCD. This leads to an out-of-bounds read of auxrd_interval[7] when offset is 8.
Fix this by growing auxrdinterval to MAXREPEATERCNT elements to accommodate the full range of valid repeater counts defined by the DP spec.
(cherry picked from commit a55a458a8df37a65ffda5cf721d554a8f74f6b04)
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53330.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/454d3b3d499c18373f8960d31aea48338a3ca9e0
- https://git.kernel.org/stable/c/dc1490927d79fe9621e29f4a4f5d7b5ccb6aea3e
- https://git.kernel.org/stable/c/e8b4d37eba05141ee01794fc6b7f2da808cee83b
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53330.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-53330
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git