{"id":"CVE-2026-98886","title":"drm/gma500: return errors from Oaktrail HDMI I2C reads","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/gma500: return errors from Oaktrail HDMI I2C reads\n\nxfer_read() waits for the HDMI I2C transaction to reach\nI2C_TRANSACTION_DONE, but it ignores both timeout and si…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 09a950950e7e4e74e021e60941c8e816ef1b4f71","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 898d209157fe2a245f7d9fe28c5921037d8b5033","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 15c6d7f7127a53b7312232178ecf03e5850161d2","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8add43887cca1fe11a0ded62199ce726901d3f20","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < f85e8224bd4e1a0939cbfe13a6220fbddf61127c","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c268df0653ab07bafc3d191e74ea097e3d9b9e69","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 9b5ce5c496efd20c1c662cedba88465d39ec1f93","Linux < 5.10.271","Linux < 5.15.222","Linux < 6.1.189","Linux < 6.6.158","Linux < 6.12.111","Linux < 6.18.53","Linux (all versions)"],"published":"2026-10-23","updated":"2026-10-23","sourceUpdated":"2026-10-23T11:37:43.338Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98886","references":[{"url":"https://git.kernel.org/stable/c/09a950950e7e4e74e021e60941c8e816ef1b4f71"},{"url":"https://git.kernel.org/stable/c/898d209157fe2a245f7d9fe28c5921037d8b5033"},{"url":"https://git.kernel.org/stable/c/15c6d7f7127a53b7312232178ecf03e5850161d2"},{"url":"https://git.kernel.org/stable/c/8add43887cca1fe11a0ded62199ce726901d3f20"},{"url":"https://git.kernel.org/stable/c/f85e8224bd4e1a0939cbfe13a6220fbddf61127c"},{"url":"https://git.kernel.org/stable/c/c268df0653ab07bafc3d191e74ea097e3d9b9e69"},{"url":"https://git.kernel.org/stable/c/9b5ce5c496efd20c1c662cedba88465d39ec1f93"}],"tags":["cve.org"],"ingestedAt":"2026-10-23T13:24:55.580Z","slug":"CVE-2026-98886","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/gma500: return errors from Oaktrail HDMI I2C reads\n\nxfer_read() waits for the HDMI I2C transaction to reach\nI2C_TRANSACTION_DONE, but it ignores both timeout and signal returns from\nwait_for_completion_interruptible_timeout().  If the interrupt never\nadvances the transaction state, the loop can wait forever.\n\nReturn -ETIMEDOUT when the completion wait expires, propagate interrupted\nwaits, and make the I2C master_xfer callback return the first transfer\nerror instead of reporting a successful message count.\n\n## Affected\n\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 09a950950e7e4e74e021e60941c8e816ef1b4f71`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 898d209157fe2a245f7d9fe28c5921037d8b5033`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 15c6d7f7127a53b7312232178ecf03e5850161d2`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8add43887cca1fe11a0ded62199ce726901d3f20`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < f85e8224bd4e1a0939cbfe13a6220fbddf61127c`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c268df0653ab07bafc3d191e74ea097e3d9b9e69`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 9b5ce5c496efd20c1c662cedba88465d39ec1f93`\n- `Linux < 5.10.271`\n- `Linux < 5.15.222`\n- `Linux < 6.1.189`\n- `Linux < 6.6.158`\n- `Linux < 6.12.111`\n- `Linux < 6.18.53`\n- `Linux (all versions)`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}