https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:52:11 +0000 https://vulnerability.circl.lu/vuln/cve-2026-72452 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/i915: clear CRTC color blob pointers after dropping refs</p> <p>intel_crtc_put_color_blobs() drops the CRTC color blob references, but leaves the corresponding pointers unchanged.</p> <p>This can matter in intel_crtc_prepare_cleared_state(), which frees the old CRTC hw state before calling intel_dp_tunnel_atomic_clear_stream_bw(). The latter can fail while looking up the DP tunnel group state, for example with -EDEADLK.</p> <p>If that happens, the function returns without completing the cleared state preparation. The failed atomic state will then be cleared by the atomic core and intel_crtc_free_hw_state() can be called again for the same state, dropping the same blob references again.</p> <p>Clear the blob pointers after dropping the references so repeated cleanup of the same CRTC hw state is safe.</p> <p>(cherry picked from commit d5005addb5f68e8a0edce249506757bdc9e3d8c8)</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/i915: clear CRTC color blob pointers after dropping refs</p> <p>intel_crtc_put_color_blobs() drops the CRTC color blob references, but leaves the corresponding pointers unchanged.</p> <p>This can matter in intel_crtc_prepare_cleared_state(), which frees the old CRTC hw state before calling intel_dp_tunnel_atomic_clear_stream_bw(). The latter can fail while looking up the DP tunnel group state, for example with -EDEADLK.</p> <p>If that happens, the function returns without completing the cleared state preparation. The failed atomic state will then be cleared by the atomic core and intel_crtc_free_hw_state() can be called again for the same state, dropping the same blob references again.</p> <p>Clear the blob pointers after dropping the references so repeated cleanup of the same CRTC hw state is safe.</p> <p>(cherry picked from commit d5005addb5f68e8a0edce249506757bdc9e3d8c8)</p> https://vulnerability.circl.lu/vuln/cve-2026-72452