CVE-2026-89821drm/amd/display: avoid divide-by-zero in __is_lut_linear()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid divide-by-zero in __is_lut_linear() __is_lut_linear() computes the expected value of each entry with expected = i * MAX_DRM_LUT_VALUE / (size - 1); If it is ever called with a single-entry LUT, size - 1 is zero and the kernel takes a divide error (#DE). A LUT with fewer than two entries cannot describe a linear mapping anyway, so return false early instead of dividing by zero.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 086247a4b2fba49800b27807f22bb894cd8363fb before 2320626425f3af3a25b8afb6876f205b1c6d4e64; from 086247a4b2fba49800b27807f22bb894cd8363fb before d1e06d5dc8f12451ce71dc068342660a34476084; from 086247a4b2fba49800b27807f22bb894cd8363fb before c127ace7af2b40107947a6504391f94d6fd21734; 086247a4b2fba49800b27807f22bb894cd8363fb builds before 4d5ee095a58461b2446d7a6eb0c14c2fe3eaab44; 086247a4b2fba49800b27807f22bb894cd8363fb builds before 5f18cd1ba873e751bf5547407ad44ea34adfbe2f; from 086247a4b2fba49800b27807f22bb894cd8363fb before ee28fafb50f58b847509b5240b431ddec673bdfe; 086247a4b2fba49800b27807f22bb894cd8363fb builds before 15ee43aad0df43dfd1dbb32e7d5b951745c4b87f; 086247a4b2fba49800b27807f22bb894cd8363fb builds before 4f40873f8a4107df2b9c8e68c947c4fd0cd519d2 | CNA record |
References
- https://git.kernel.org/stable/c/2320626425f3af3a25b8afb6876f205b1c6d4e64
- https://git.kernel.org/stable/c/d1e06d5dc8f12451ce71dc068342660a34476084
- https://git.kernel.org/stable/c/c127ace7af2b40107947a6504391f94d6fd21734
- https://git.kernel.org/stable/c/4d5ee095a58461b2446d7a6eb0c14c2fe3eaab44
- https://git.kernel.org/stable/c/5f18cd1ba873e751bf5547407ad44ea34adfbe2f
- https://git.kernel.org/stable/c/ee28fafb50f58b847509b5240b431ddec673bdfe
- https://git.kernel.org/stable/c/15ee43aad0df43dfd1dbb32e7d5b951745c4b87f
- https://git.kernel.org/stable/c/4f40873f8a4107df2b9c8e68c947c4fd0cd519d2
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.