CVE-2026-74449
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport If a plane reaches calculate_mcache_setting with a zero-area viewport, calculate_mcache_setting exits early with num_mcaches == 0 and mvmpg_width/height == 0. This will cause a divide-by-zero panic and can also cause an underflow on num_mcaches. Fix this by changing calculate_mcache_setting to bool and adding guards after each calculate_mcache_row_bytes call. If num_mcaches or mvmpg_width/height is zero, return a false. Callers will propagate the failure as a rejected mode, which prevents the panic. (cherry picked from commit 29c0f7c655f47bcbd575ff75e58480df6ec3c9da)
How to fix
- Linux Linux70f5f4ddba0d2d89e77ec13b79cdcfbef33be0d9, 23a541c31b45fa813b33269376f6bd53535429a8, 1f93537881fd22712732a60ad12572a3fd40c0ec, f327e389c07cfc3a2f6ff54f6214e1a52d457edc or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 70839da6360500a82e4d5f78499284474cbed7c1 ≤ v < 70f5f4ddba0d2d89e77ec13b79cdcfbef33be0d9, 70839da6360500a82e4d5f78499284474cbed7c1 ≤ v < 23a541c31b45fa813b33269376f6bd53535429a8, 70839da6360500a82e4d5f78499284474cbed7c1 ≤ v < 1f93537881fd22712732a60ad12572a3fd40c0ec, 70839da6360500a82e4d5f78499284474cbed7c1 ≤ v < f327e389c07cfc3a2f6ff54f6214e1a52d457edc, 6.11 | 70f5f4ddba0d2d89e77ec13b79cdcfbef33be0d9, 23a541c31b45fa813b33269376f6bd53535429a8, 1f93537881fd22712732a60ad12572a3fd40c0ec, f327e389c07cfc3a2f6ff54f6214e1a52d457edc |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.