CVE-2026-90289
High
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Resize MST HDCP per-connector arrays to 32 AMDGPU_DM_MAX_DISPLAY_INDEX is 31. It suggest a maximum number of 32 connectors. But the way it's used is like MAX_DISPLAY_COUNT. Hence we're off by one with DRM core, which supports a max of 32 connectors. Rename AMDGPU_DM_MAX_DISPLAY_INDEX to AMDGPU_DM_MAX_DISPLAY_COUNT to match its actual use, and increase the size to 32 to match the originally intended size.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedSep 17, 2026
First seenSep 17, 2026
How to fix
Update
- Linux Linux1c22294c7d9b3b1c26a18ca4eca8c863a5a0d907, decea8279bec5a35413b2cb8e36951cca308fac0, ac490fea9fe74f9d9975c5d8250c8719750589cd, 562d24ac214ba9530d88841088eb6adce5c537b5, 0fa116a17b69a28712cdf209318e345b676d7f6c, 261e0fe4e2c99f687114b64b10b98db964b475f4, 6.1.191, 5.16 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | d90f97cb3821c47bdf773dcf6cade143773ec764 ≤ v < 1c22294c7d9b3b1c26a18ca4eca8c863a5a0d907, 82986fd631fa04bcedaefe11a6b3767601cbe84f ≤ v < decea8279bec5a35413b2cb8e36951cca308fac0, 82986fd631fa04bcedaefe11a6b3767601cbe84f ≤ v < ac490fea9fe74f9d9975c5d8250c8719750589cd, 82986fd631fa04bcedaefe11a6b3767601cbe84f ≤ v < 562d24ac214ba9530d88841088eb6adce5c537b5, 82986fd631fa04bcedaefe11a6b3767601cbe84f ≤ v < 0fa116a17b69a28712cdf209318e345b676d7f6c, 82986fd631fa04bcedaefe11a6b3767601cbe84f ≤ v < 261e0fe4e2c99f687114b64b10b98db964b475f4, 99c444d3c3c43db354b253d9bfac081073dcb484, 6.1.47 ≤ v < 6.1.191, 5.15.128 ≤ v < 5.16, 6.3 | 1c22294c7d9b3b1c26a18ca4eca8c863a5a0d907, decea8279bec5a35413b2cb8e36951cca308fac0, ac490fea9fe74f9d9975c5d8250c8719750589cd, 562d24ac214ba9530d88841088eb6adce5c537b5, 0fa116a17b69a28712cdf209318e345b676d7f6c, 261e0fe4e2c99f687114b64b10b98db964b475f4, 6.1.191, 5.16 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.