CVE-2026-53142

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/display: fix oops in suspend/shutdown without display

The xe driver keeps track of whether to probe display, and whether

display hardware is there, using xe->info.probe_display. It gets set to

false if there's no display after intel_display_device_probe(). However,

the display may also be disabled via fuses, detected at a later time in

intel_display_device_info_runtime_init().

In this case, the xe driver does for_each_intel_crtc() on uninitialized

mode config in xe_display_flush_cleanup_work(), leading to a NULL

pointer dereference, and generally calls display code with display info

cleared.

Check for intel_display_device_present() after

intel_display_device_info_runtime_init(), and reset

xe->info.probe_display as necessary. Also do unset_display_features()

for completeness, although display runtime init has already done

that. This will need to be unified across all cases later.

Move intel_display_device_in

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References