drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval() (CVE-2026-53330) | HOL Guard CVE

Unknown severity · Source severity not reportedCVE-2026-53330

drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()

Answer in brief

CVE-2026-53330 records a Unknown severity vulnerability in drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Analysis pending evidence review

HOL Guard separates source facts from reviewed analysis. See the methodology.

Published Jul 1, 2026Updated Jul 10, 2026Source checked Sep 21, 2026First seen by HOL Jul 1, 2026Material review Jul 10, 2026

Upstream Advisory

Key facts

Risk: Unknown severitySource severity not reported
Exploitation: Not marked as known exploited
Affected software: 2 mapped packages or products
Fix availability: Available

Why this deserves its current priority

A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Analysis status

Analysis pending evidence review

Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.

Affected scope and exposure questions

The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Mapped affected packages and fixed versions
Package	Affected range	Fixed version
Linux/Linuxgeneric	>=8e5100a575433cc185a2e224280fbd873b6692dd <454d3b3d499c18373f8960d31aea48338a3ca9e0 \|\| >=8e5100a575433cc185a2e224280fbd873b6692dd <dc1490927d79fe9621e29f4a4f5d7b5ccb6aea3e \|\| >=8e5100a575433cc185a2e224280fbd873b6692dd <e8b4d37eba05141ee01794fc6b7f2da808cee83b	454d3b3d499c18373f8960d31aea48338a3ca9e0, dc1490927d79fe9621e29f4a4f5d7b5ccb6aea3e, e8b4d37eba05141ee01794fc6b7f2da808cee83b
Linux/Linuxgeneric	5.6	Not reported

Recommended response

Check inventory. Check lockfiles and deployed manifests for Linux/Linux, Linux/Linux.
Review the reported fix. Update Linux/Linux to 454d3b3d499c18373f8960d31aea48338a3ca9e0 if you use the affected versions. Test the change in a non-production environment first.

Evidence timeline and material changes

Published upstream
Jul 1, 2026
Evidence: source:cvelist:source_dates:source-dates:record
Source modified
Jul 10, 2026
Evidence: source:cvelist:source_dates:source-dates:record
First seen by HOL
Jul 1, 2026

Sources and claim methodology

Upstream source description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval() [Why & How] The aux_rd_interval array in struct dc_lttpr_caps is declared with MAX_REPEATER_CNT - 1 (7) elements, indexed 0..6. However, the offset parameter passed to dp_get_eq_aux_rd_interval() can be as large as MAX_REPEATER_CNT (8) when a sink reports 8 LTTPR repeaters via DPCD. This leads to an out-of-bounds read of aux_rd_interval[7] when offset is 8. Fix this by growing aux_rd_interval to MAX_REPEATER_CNT elements to accommodate the full range of valid repeater counts defined by the DP spec. (cherry picked from commit a55a458a8df37a65ffda5cf721d554a8f74f6b04)

Quoted source text, attributed separately from HOL analysis.