CVE-2026-98886

drm/gma500: return errors from Oaktrail HDMI I2C reads

State: Published
Severity: Not scored
Published: Oct 23, 2026
Updated: Oct 26, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/gma500: return errors from Oaktrail HDMI I2C reads

xfer_read() waits for the HDMI I2C transaction to reach I2C_TRANSACTION_DONE, but it ignores both timeout and signal returns from wait_for_completion_interruptible_timeout(). If the interrupt never advances the transaction state, the loop can wait forever.

Return -ETIMEDOUT when the completion wait expires, propagate interrupted waits, and make the I2C master_xfer callback return the first transfer error instead of reporting a successful message count.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1e585b52fd8ea59792634bc31d227eb3456af22e to before 09a950950e7e4e74e021e60941c8e816ef1b4f71Affected 1e585b52fd8ea59792634bc31d227eb3456af22e to before 898d209157fe2a245f7d9fe28c5921037d8b5033Affected 1e585b52fd8ea59792634bc31d227eb3456af22e to before 15c6d7f7127a53b7312232178ecf03e5850161d2Affected 1e585b52fd8ea59792634bc31d227eb3456af22e to before 8add43887cca1fe11a0ded62199ce726901d3f20Affected 1e585b52fd8ea59792634bc31d227eb3456af22e to before f85e8224bd4e1a0939cbfe13a6220fbddf61127cAffected 1e585b52fd8ea59792634bc31d227eb3456af22e to before c268df0653ab07bafc3d191e74ea097e3d9b9e69Affected 1e585b52fd8ea59792634bc31d227eb3456af22e to before 9b5ce5c496efd20c1c662cedba88465d39ec1f93Affected
LinuxLinux	3.1Affected before 3.1Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

1e585b52fd8ea59792634bc31d227eb3456af22e to before 09a950950e7e4e74e021e60941c8e816ef1b4f71Affected
1e585b52fd8ea59792634bc31d227eb3456af22e to before 898d209157fe2a245f7d9fe28c5921037d8b5033Affected
1e585b52fd8ea59792634bc31d227eb3456af22e to before 15c6d7f7127a53b7312232178ecf03e5850161d2Affected
1e585b52fd8ea59792634bc31d227eb3456af22e to before 8add43887cca1fe11a0ded62199ce726901d3f20Affected
1e585b52fd8ea59792634bc31d227eb3456af22e to before f85e8224bd4e1a0939cbfe13a6220fbddf61127cAffected
1e585b52fd8ea59792634bc31d227eb3456af22e to before c268df0653ab07bafc3d191e74ea097e3d9b9e69Affected
1e585b52fd8ea59792634bc31d227eb3456af22e to before 9b5ce5c496efd20c1c662cedba88465d39ec1f93Affected

LinuxLinux

3.1Affected
before 3.1Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.