SB2026102434 - Unchecked Return Value in Linux kernel drm gma500 driver



SB2026102434 - Unchecked Return Value in Linux kernel drm gma500 driver

Published: October 24, 2026

Security Bulletin ID SB2026102434
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Partial DoS

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Unchecked Return Value (CVE-ID: CVE-2026-98886)

CWE-ID: CWE-252 - Unchecked Return Value

CVSSv4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a local user to cause a denial of service by causing HDMI I2C read operations to wait indefinitely.

The vulnerability exists due to unchecked timeout and interruption return values in the xfer_read() function of the Oaktrail HDMI I2C driver when waiting for a read transaction to complete. A local user can trigger an affected read operation under conditions where the interrupt does not advance the transaction state to cause an indefinite wait, potentially blocking subsequent HDMI I2C transfers.


Remediation

Install update from vendor's website.