All vulnerabilities
CVE-2026-98875

Linux: drm/nouveau/gsp: add SEC2 to GA100 chip table

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in604d0efb17cc0dd197e089134736ac2698d5fca7Also 6.6.158, 6.18.53CVE List
Published23 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/nouveau/gsp: add SEC2 to GA100 chip table

The booter-load and booter-unload firmware run on the SEC2 falcon. During tu102_gsp_oneinit(), the booter constructor needs device->sec2 to access the SEC2 falcon.

Without the .sec2 entry, device->sec2 is NULL and this dereference crashes during GSP-RM boot.

Text from CVE List

Affected versions 8

  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before feb1ad41281aed00e8a741942e56a1cd774e8342CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before f29267ace04283e76f92a74d9a7f4fcfcb32f484CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 604d0efb17cc0dd197e089134736ac2698d5fca7CVE List
  • Linuxaffected: all versions before 6.6.158CVE List
  • Linuxaffected: all versions before 6.18.53CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 3