OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-90289

HIGH · CVSS 7.8 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-09-17 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's AMD GPU display driver, where an off-by-one error in the handling of Multi-Stream Transport (MST) HDCP per-connector arrays could lead to improper management of display connectors. This flaw may result in potential security implications, such as unauthorized access to protected content or display configuration issues. Organizations utilizing Linux systems with AMD GPUs should prioritize addressing this vulnerability to ensure secure and optimal display functionality.

CVE
CVE-2026-90289
Severity
HIGH
CVSS
7.8
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Resize MST HDCP per-connector arrays to 32 AMDGPU_DM_MAX_DISPLAY_INDEX is 31. It suggest a maximum number of 32 connectors. But the way it's used is like MAX_DISPLAY_COUNT. Hence we're off by one with DRM core, which supports a max of 32 connectors. Rename AMDGPU_DM_MAX_DISPLAY_INDEX to AMDGPU_DM_MAX_DISPLAY_COUNT to match its actual use, and increase the size to 32 to match the originally intended size.