Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98404

drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() Smatch complains that returning a NULL here will lead to a NULL pointer dereference in drm_mode_addfb2(). Return an error pointer instead.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • dc5698e80cf724770283e10414054662bdf6ccfa to < 975f3cf302bb7d7336df4c630a7c07e12780ad10affected
  • dc5698e80cf724770283e10414054662bdf6ccfa to < 07de0b31dd64094cd7d25729beaf2ecae74daa72affected
  • dc5698e80cf724770283e10414054662bdf6ccfa to < 5eda6cda0031ba17559d56882353be39e568ec09affected
  • dc5698e80cf724770283e10414054662bdf6ccfa to < 3fe8a33715265ecb24ca0bcd0a575c926da4277caffected
  • dc5698e80cf724770283e10414054662bdf6ccfa to < 974845d2535a250b180e62f9ed50284f312c01a3affected
  • dc5698e80cf724770283e10414054662bdf6ccfa to < 45dc2788a5b0e1e2824d1f98af521bd3acc340d7affected
  • dc5698e80cf724770283e10414054662bdf6ccfa to < f1050a7d365283678b253828739d3866ae546a72affected
  • dc5698e80cf724770283e10414054662bdf6ccfa to < 94579f24e2b526a04eb41050af0ba018c6f528e7affected

Linux Linux

Default version status: affected

  • 4.2affected
  • 0 to < 4.2unaffected
  • 5.10.271 to ≤ 5.10.*unaffected
  • 5.15.222 to ≤ 5.15.*unaffected
  • 6.1.189 to ≤ 6.1.*unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2.7 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References