---
id: CVE-2026-98926
title: 'drm/amd/display: Remove sink usage from DPMS'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/amd/display: Remove sink usage from DPMS

  [Why]
  stream->sink is optional and can be null, so should always be checked
  before dereference. Additionally, most of its …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    0b1eebd359685dd681f6e0df5540a5bb985a27bf
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    8fa813b7fd1eccbed13e126166cf764f1f11a7d3
  - Linux < 7.2.9
  - Linux (all versions)
published: '2026-10-23'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T12:05:54.511Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98926'
references:
  - url: 'https://git.kernel.org/stable/c/0b1eebd359685dd681f6e0df5540a5bb985a27bf'
  - url: 'https://git.kernel.org/stable/c/8fa813b7fd1eccbed13e126166cf764f1f11a7d3'
tags:
  - cve.org
ingestedAt: '2026-10-23T13:24:55.567Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Remove sink usage from DPMS

[Why]
stream->sink is optional and can be null, so should always be checked
before dereference. Additionally, most of its usage in DPMS sequences
is for stream->sink->link, which can be replaced with stream->link,
as the two should always be the same.

[How]
* Replace stream->sink->link in DPMS on/off
* Add assert to USB4 BW allocation where sink is required
* Avoid inconsistencies in resource access, e.g. don't repeat
stream->link after it was already saved to a local variable
* Pull out effective VPG calculation to helper getter
* Formatting fixes

## Affected

- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 0b1eebd359685dd681f6e0df5540a5bb985a27bf`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8fa813b7fd1eccbed13e126166cf764f1f11a7d3`
- `Linux < 7.2.9`
- `Linux (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.