CVE-2026-53066 | Linux Kernel up to 7.0.9 drm sun4i_backend.c drm_atomic_get_plane_state null pointer dereference (WID-SEC-2026-2077)

A vulnerability described as critical has been identified in Linux Kernel up to 6.1.174/6.6.140/6.12.90/6.18.32/7.0.9. The affected element is the function drm_atomic_get_plane_state of the file drivers/gpu/drm/sun4i/sun4i_backend.c of the component drm. The manipulation results in null pointer dereference. This vulnerability is cataloged as CVE-2026-53066. The attack must originate from the local network. There is no exploit available. Upgrading the affected component is recommended.