All vulnerabilities
CVE-2026-98886

Linux: drm/gma500: return errors from Oaktrail HDMI I2C reads

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in09a950950e7e4e74e021e60941c8e816ef1b4f71Also 898d209157fe2a245f7d9fe28c5921037d8b5033, 15c6d7f7127a53b7312232178ecf03e5850161d2 and 8 moreCVE List
Published23 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

  • 09a950950e7e4e74e021e60941c8e816ef1b4f71LinuxCVE List
  • 898d209157fe2a245f7d9fe28c5921037d8b5033LinuxCVE List
  • 15c6d7f7127a53b7312232178ecf03e5850161d2LinuxCVE List
  • 8add43887cca1fe11a0ded62199ce726901d3f20LinuxCVE List
  • 9b5ce5c496efd20c1c662cedba88465d39ec1f93LinuxCVE List
  • 5.10.271LinuxCVE List
Show all 11 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/gma500: return errors from Oaktrail HDMI I2C reads

xfer_read() waits for the HDMI I2C transaction to reach I2C_TRANSACTION_DONE, but it ignores both timeout and signal returns from wait_for_completion_interruptible_timeout(). If the interrupt never advances the transaction state, the loop can wait forever.

Return -ETIMEDOUT when the completion wait expires, propagate interrupted waits, and make the I2C master_xfer callback return the first transfer error instead of reporting a successful message count.

Text from CVE List

Affected versions 20

  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 09a950950e7e4e74e021e60941c8e816ef1b4f71CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 898d209157fe2a245f7d9fe28c5921037d8b5033CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 15c6d7f7127a53b7312232178ecf03e5850161d2CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 8add43887cca1fe11a0ded62199ce726901d3f20CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before f85e8224bd4e1a0939cbfe13a6220fbddf61127cCVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c268df0653ab07bafc3d191e74ea097e3d9b9e69CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9b5ce5c496efd20c1c662cedba88465d39ec1f93CVE List
  • Linuxaffected: all versions before 5.10.271CVE List
  • Linuxaffected: all versions before 5.15.222CVE List
  • Linuxaffected: all versions before 6.1.189CVE List
  • Linuxaffected: all versions before 6.6.158CVE List
  • Linuxaffected: all versions before 6.12.111CVE List
  • Linuxaffected: all versions before 6.18.53CVE List
  • Linuxunaffected: 5.10.271 through 5.10.*CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 7