Linux Kernel Vulnerability in HDMI Functionality Affecting Raspberry Pi

CVE-2026-99214

What is CVE-2026-99214?

A vulnerability exists in the Linux kernel's HDMI functionality, primarily affecting devices like the Raspberry Pi. This issue arises when audio can be initiated by the Hot Plug Detect (HPD) handler before the video is properly restored, leading to the execution of the vc4_hdmi_write_infoframe() function without valid Packet RAM availability. If the video enabling process hasn't occurred beforehand, the Packet RAM could be disabled, resulting in errors that affect audio handling. To mitigate this, the enabling of Packet RAM has been shifted to Runtime Power Management hooks, ensuring that even with post_crtc_disable() stopping infoframes, the Packet RAM remains active until runtime suspension.

References