{"id":"CVE-2026-98973","title":"drm/bridge: Fix unlocked list_del in drm_bridge_add()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: Fix unlocked list_del in drm_bridge_add()\n\nWhen re-adding a bridge that was previously removed, drm_bridge_add()\ndrops it from bridge_lingering_list without…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 17805a15d1751f5d6bb06f924f9bed216feb8db7 < f469d850854101eae60dd4080244f114a9bcf2b5","Linux >= 17805a15d1751f5d6bb06f924f9bed216feb8db7 < b62e3db8cdc1680e1c3390591e872f485148541a","Linux 6.19"],"published":"2026-10-23","updated":"2026-10-23","sourceUpdated":"2026-10-23T12:19:46.458Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98973","references":[{"url":"https://git.kernel.org/stable/c/f469d850854101eae60dd4080244f114a9bcf2b5"},{"url":"https://git.kernel.org/stable/c/b62e3db8cdc1680e1c3390591e872f485148541a"}],"tags":["cve.org"],"ingestedAt":"2026-10-23T13:24:55.551Z","slug":"CVE-2026-98973","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: Fix unlocked list_del in drm_bridge_add()\n\nWhen re-adding a bridge that was previously removed, drm_bridge_add()\ndrops it from bridge_lingering_list without holding bridge_lock.\n\nBoth bridge_list and bridge_lingering_list are protected by bridge_lock,\nas they are concurrently modified by drm_bridge_remove() and\n__drm_bridge_free(), and walked by the debugfs 'bridges' file.  Running\nthe list_empty() test and the list_del_init() outside of the lock may\ntherefore corrupt either list.\n\nPerform both under bridge_lock.\n\n## Affected\n\n- `Linux >= 17805a15d1751f5d6bb06f924f9bed216feb8db7 < f469d850854101eae60dd4080244f114a9bcf2b5`\n- `Linux >= 17805a15d1751f5d6bb06f924f9bed216feb8db7 < b62e3db8cdc1680e1c3390591e872f485148541a`\n- `Linux 6.19`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}