---
id: CVE-2026-98926
title: 'drm/amd/display: Remove sink usage from DPMS'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/amd/display: Remove sink usage from DPMS

  [Why]
  stream->sink is optional and can be null, so should always be checked
  before dereference. Additionally, most of its …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 052fa7e8c9a92e3804ba9dba7c2550a9684d3441 <
    0b1eebd359685dd681f6e0df5540a5bb985a27bf
  - >-
    Linux >= 052fa7e8c9a92e3804ba9dba7c2550a9684d3441 <
    8fa813b7fd1eccbed13e126166cf764f1f11a7d3
  - Linux 5.3
published: '2026-10-23'
updated: '2026-10-26'
sourceUpdated: '2026-10-26T06:56:50.146Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98926'
references:
  - url: 'https://git.kernel.org/stable/c/0b1eebd359685dd681f6e0df5540a5bb985a27bf'
  - url: 'https://git.kernel.org/stable/c/8fa813b7fd1eccbed13e126166cf764f1f11a7d3'
tags:
  - cve.org
epss: 0.00156
epssPercentile: 0.04672
ingestedAt: '2026-10-23T13:24:55.567Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Remove sink usage from DPMS

[Why]
stream->sink is optional and can be null, so should always be checked
before dereference. Additionally, most of its usage in DPMS sequences
is for stream->sink->link, which can be replaced with stream->link,
as the two should always be the same.

[How]
* Replace stream->sink->link in DPMS on/off
* Add assert to USB4 BW allocation where sink is required
* Avoid inconsistencies in resource access, e.g. don't repeat
stream->link after it was already saved to a local variable
* Pull out effective VPG calculation to helper getter
* Formatting fixes

## Affected

- `Linux >= 052fa7e8c9a92e3804ba9dba7c2550a9684d3441 < 0b1eebd359685dd681f6e0df5540a5bb985a27bf`
- `Linux >= 052fa7e8c9a92e3804ba9dba7c2550a9684d3441 < 8fa813b7fd1eccbed13e126166cf764f1f11a7d3`
- `Linux 5.3`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.