What’s Vulnerable › Vulnerabilities

CVE-2026-93195: drm/bridge: synopsys: dw-dp: Support unregistering the AUX channel

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-17 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: synopsys: dw-dp: Support unregistering the AUX channel The DisplayPort AUX channel gets initialized and registered during dw_dp_bind(), but it is never unregistered, which may lead to resource leaks and/or use-after-free. Add the missing dw_dp_unbind() function to allow the users of the library to handle the required cleanup, i.e. unregister the AUX adapter.

Affected products

• Linux kernel: 6.18 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/48aaa495e24ce5aec3dc56706473b0bd4305a306
• https://git.kernel.org/stable/c/b2bec2d4a769d5b7b8202123404c7cd1aec17861
• https://git.kernel.org/stable/c/ed04e8e2307f35b3d8d49a554faf5e72d3d224e6

Get alerted when CVE-2026-93195 or the next vulnerability affects your stack