SB2026102434 - Unchecked Return Value in Linux kernel drm gma500 driver
Published: October 24, 2026
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Unchecked Return Value (CVE-ID: CVE-2026-98886)
CWE-ID: CWE-252 - Unchecked Return Value
CVSSv4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a local user to cause a denial of service by causing HDMI I2C read operations to wait indefinitely.
The vulnerability exists due to unchecked timeout and interruption return values in the xfer_read() function of the Oaktrail HDMI I2C driver when waiting for a read transaction to complete. A local user can trigger an affected read operation under conditions where the interrupt does not advance the transaction state to cause an indefinite wait, potentially blocking subsequent HDMI I2C transfers.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/09a950950e7e4e74e021e60941c8e816ef1b4f71
- https://git.kernel.org/stable/c/15c6d7f7127a53b7312232178ecf03e5850161d2
- https://git.kernel.org/stable/c/898d209157fe2a245f7d9fe28c5921037d8b5033
- https://git.kernel.org/stable/c/8add43887cca1fe11a0ded62199ce726901d3f20
- https://git.kernel.org/stable/c/9b5ce5c496efd20c1c662cedba88465d39ec1f93
- https://git.kernel.org/stable/c/c268df0653ab07bafc3d191e74ea097e3d9b9e69
- https://git.kernel.org/stable/c/f85e8224bd4e1a0939cbfe13a6220fbddf61127c