CVE-2026-89773

Received Received - Intake

AMD Display Driver HDCP Configuration Flaw

Publication date: 2026-09-11

Last updated on: 2026-09-13

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip Update HDCP Config In Transition State Transition state does not have a valid dm_stream_ctx that should skip configuring HDCP routine. The routine is valid to go through only when a valid stream is created.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-13

Generated

2026-10-02

AI Q&A

2026-09-12

EPSS Evaluated

2026-09-29

NVD

CVE-2026-89773

EUVD

EUVD-2026-76685

Affected Vendors & Products

Vendor	Product	Version / Range
linux_kernel	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a flaw in the AMD display driver where HDCP (High-bandwidth Digital Content Protection) configuration is incorrectly attempted during a transition state. Normally, HDCP setup requires a valid stream context, but the driver does not skip this routine when the system is in an invalid transition state, potentially leading to improper handling.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMD display driver (drm/amd/display). Detection requires checking kernel logs for HDCP-related errors during display state transitions. Use commands like dmesg | grep -i hdcp or journalctl -k | grep -i hdcp to inspect logs for HDCP configuration attempts during invalid states.

Impact Analysis

This vulnerability may cause display or content protection issues, such as HDCP handshake failures, leading to unprotected video output or black screens. It could disrupt multimedia playback or secure content rendering on systems using affected AMD GPUs with the Linux kernel.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is specific to the Linux kernel's display driver (AMD) and involves a display state management issue rather than data protection or privacy concerns.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this vulnerability. Monitor kernel release notes for patches addressing CVE-2026-89773. If immediate patching is not possible, restrict access to systems using AMD GPUs or disable HDCP features temporarily.

Hi! I’m here to help you understand CVE-2026-89773. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70