SB20261023152 - Improper handling of exceptional conditions in Linux kernel gpu drm driver

Description

This security bulletin contains information about 1 vulnerability.

1) Improper handling of exceptional conditions (CVE-ID: CVE-2026-99007)

CWE-ID: CWE-755 - Improper Handling of Exceptional Conditions

CVSSv4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a local user to trigger a kernel warning and potentially disrupt framebuffer mode restoration.

The vulnerability exists due to improper handling of probe failures in the Linux kernel DRM framebuffer helper when framebuffer probing fails with an error other than -EAGAIN. A local user can trigger a subsequent framebuffer mode restoration, such as on process exit, to commit stale display configuration with a missing framebuffer, causing a kernel warning and potentially disrupting framebuffer mode restoration.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/3b303696f61461b3569019d7fcac6a646652b2b4
• https://git.kernel.org/stable/c/4a2006c675758f0c765b36fec6b49d17e89159cf
• https://git.kernel.org/stable/c/4e7b508c7c60dec7a86b7eb2a1b7e6d174afa457
• https://git.kernel.org/stable/c/755c94d178b7e972bb766199d34e4ba4f63a89eb
• https://git.kernel.org/stable/c/d510ed273854177f0a3ed330145858b2fe667f81