Not yet scoredPublished Oct 23, 2026

CVE-2026-98886drm/gma500: return errors from Oaktrail HDMI I2C reads

Updated under an hour ago (Oct 27, 2026, 11:23 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/gma500: return errors from Oaktrail HDMI I2C reads xfer_read() waits for the HDMI I2C transaction to reach I2C_TRANSACTION_DONE, but it ignores both timeout and signal returns from wait_for_completion_interruptible_timeout(). If the interrupt never advances the transaction state, the loop can wait forever. Return -ETIMEDOUT when the completion wait expires, propagate interrupted waits, and make the I2C master_xfer callback return the first transfer error instead of reporting a successful message count.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 26, 2026
First seen by InfoSec Signals: Oct 23, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1e585b52fd8ea59792634bc31d227eb3456af22e before 09a950950e7e4e74e021e60941c8e816ef1b4f71; from 1e585b52fd8ea59792634bc31d227eb3456af22e before 898d209157fe2a245f7d9fe28c5921037d8b5033; from 1e585b52fd8ea59792634bc31d227eb3456af22e before 15c6d7f7127a53b7312232178ecf03e5850161d2; from 1e585b52fd8ea59792634bc31d227eb3456af22e before 8add43887cca1fe11a0ded62199ce726901d3f20; from 1e585b52fd8ea59792634bc31d227eb3456af22e before f85e8224bd4e1a0939cbfe13a6220fbddf61127c; from 1e585b52fd8ea59792634bc31d227eb3456af22e before c268df0653ab07bafc3d191e74ea097e3d9b9e69; from 1e585b52fd8ea59792634bc31d227eb3456af22e before 9b5ce5c496efd20c1c662cedba88465d39ec1f93	CNA record

References

References

https://git.kernel.org/stable/c/09a950950e7e4e74e021e60941c8e816ef1b4f71
https://git.kernel.org/stable/c/898d209157fe2a245f7d9fe28c5921037d8b5033
https://git.kernel.org/stable/c/15c6d7f7127a53b7312232178ecf03e5850161d2
https://git.kernel.org/stable/c/8add43887cca1fe11a0ded62199ce726901d3f20
https://git.kernel.org/stable/c/f85e8224bd4e1a0939cbfe13a6220fbddf61127c
https://git.kernel.org/stable/c/c268df0653ab07bafc3d191e74ea097e3d9b9e69
https://git.kernel.org/stable/c/9b5ce5c496efd20c1c662cedba88465d39ec1f93

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.