Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-98404

drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 2 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() Smatch complains that returning a NULL here will lead to a NULL pointer dereference in drm_mode_addfb2(). Return an error pointer instead.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From dc5698e80cf724770283e10414054662bdf6ccfa · fixed in 975f3cf302bb7d7336df4c630a7c07e12780ad10; From dc5698e80cf724770283e10414054662bdf6ccfa · fixed in 07de0b31dd64094cd7d25729beaf2ecae74daa72; From dc5698e80cf724770283e10414054662bdf6ccfa · fixed in 5eda6cda0031ba17559d56882353be39e568ec09; From dc5698e80cf724770283e10414054662bdf6ccfa · fixed in 3fe8a33715265ecb24ca0bcd0a575c926da4277c; From dc5698e80cf724770283e10414054662bdf6ccfa · fixed in 974845d2535a250b180e62f9ed50284f312c01a3; From dc5698e80cf724770283e10414054662bdf6ccfa · fixed in 45dc2788a5b0e1e2824d1f98af521bd3acc340d7; From dc5698e80cf724770283e10414054662bdf6ccfa · fixed in f1050a7d365283678b253828739d3866ae546a72; From dc5698e80cf724770283e10414054662bdf6ccfa · fixed in 94579f24e2b526a04eb41050af0ba018c6f528e7

  • Linux Linux

    4.2

  • KernelLinux

    From 4.2.0 · fixed in 5.10.271; From 5.11.0 · fixed in 5.15.222; From 5.16.0 · fixed in 6.1.189; From 6.2.0 · fixed in 6.6.158; From 6.7.0 · fixed in 6.12.111; From 6.13.0 · fixed in 6.18.53; From 6.19.0 · fixed in 7.2.7

References 8

git.kernel.org