Junglewise Threat Intelligence

CVE-2026-31488: Linux Kernel amdgpu use-after-free in DSC validation

CVE-2026-31488 · Severity: high · CVSS 7.8 · Published 2026-04-22

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A vulnerability in the AMD graphics driver for Linux could allow a local user to crash the system or potentially execute unauthorized code. The issue occurs when the system incorrectly handles display configuration changes, such as plugging in external monitors to a laptop. This can lead to memory corruption, affecting system stability and the security of user data.

Technical details

A use-after-free vulnerability exists in the Linux kernel's amdgpu driver within the DRM display component. The root cause is an incorrect reset of the 'mode_changed' flag to false during DSC pre-validation in the atomic check process. When a change in MST/DSC configuration occurs simultaneously with an unrelated mode change (e.g., HDR toggling), the driver may fail to release old streams or acquire references to new ones. This leads to a memory leak followed by a use-after-free when the stream is later disabled, specifically within 'dc_stream_release'. The vulnerability is reachable by local users through display configuration changes and has been patched in various stable kernel branches.

Affected products

  • Linux Linux kernel 5.18.1 to 6.12.80, 6.13 to 6.18.21, 6.19 to 6.19.11

Timeline

  • 2026-04-22: advisory: CVE-2026-31488 published
  • 2026-04-02: patched: Fix committed to stable kernel trees

References

Related threats