CVE-2026-53136 drm/amd/display: Clamp VBIOS HDMI retimer register count to array size
A malformed VBIOS can cause an out-of-bounds heap write in the AMD display driver, potentially allowing code execution or privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-53136?
CVE-2026-53136 is a high-severity memory corruption vulnerability in Linux kernel, published on 25 Jun 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Clamp VBIOS HDMI retimer register count to array size
[Why & How] The VBIOS integrated info tables (v1_11 and v2_1) contain HdmiRegNum and Hdmi6GRegNum fields that are used as loop bounds when copying retimer I2C register settings into fixed-size arrays (dp*_ext_hdmi_reg_settings[9] and dp*_ext_hdmi_6g_reg_settings[3]). These u8 fields are not validated before use, so a malformed VBIOS can specify values up to 255, causing an out-of-bounds heap write during driver probe.
Clamp each register count to the destination array size using min_t() before the copy loops, in both get_integrated_info_v11() and get_integrated_info_v2_1().
(cherry picked from commit 5a7f0ef90195940c54b0f5bb85b87da55f038c69)
Weakness: CWE-787
Which versions are affected by CVE-2026-53136?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-53136?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-53136 being exploited?
There is no known exploitation of CVE-2026-53136 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-90536, BELL-CVE-2026-53136, DEBIAN-CVE-2026-53136, GHSA-rg3c-j3j2-x6pc, ROOT-OS-DEBIAN-11-CVE-2026-53136, ROOT-OS-DEBIAN-12-CVE-2026-53136 and 3 more.