In the Linux kernel, the following vulnerability has been resolved: drm/gud: validate...
zetlyn/cve-ghsa vulnerability ghsa GHSA-pfp2-jmv8-4pwj cve CVE-2026-98148 known 2026-09-25
https://github.com/advisories/GHSA-pfp2-jmv8-4pwj
Properties
| severity | unknownreceipt
What the source handed over{
"credits": [],
"cve_id": "CVE-2026-98148",
"cvss": {
"score": null,
"vector_string": null
},
"cvss_severities": {
"cvss_v3": {
"score": 0.0,
"vector_string": null
},
"cvss_v4": {
"score": 0.0,
"vector_string": null
}
},
"cwes": [],
"description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/gud: validate GUD_ROTATION_0 is present in supported rotations\n\nThe rotation argument to drm_plane_create_rotation_property() is set to\nDRM_MODE_ROTATE_0, and the device reported rotation bitmask is used as\nthe supported_rotations argument. The driver never validates that\nGUD_ROTATION_0 is present, so a device that omits it from its\nGUD_PROPERTY_ROTATION triggers the\nWARN_ON(rotation & ~supported_rotations) in\ndrm_plane_create_rotation_property()\n\nFix this by skipping the creation of rotation property if the device\ndoesn't have the GUD_ROTATION_0 bit",
"epss": {
"percentage": 0.00155,
"percentile": 0.03949
},
"ghsa_id": "GHSA-pfp2-jmv8-4pwj",
"github_reviewed_at": null,
"html_url": "https://github.com/advisories/GHSA-pfp2-jmv8-4pwj",
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-pfp2-jmv8-4pwj"
},
{
"type": "CVE",
"value": "CVE-2026-98148"
}
],
"nvd_published_at": "2026-09-25T11:17:46Z",
"published_at": "2026-09-25T12:31:38Z",
"references": [
"https://nvd.nist.gov/vuln/detail/CVE-2026-98148",
"https://git.kernel.org/stable/c/876b33d8a9a00e9d4bbcbb7f55ad2c05974850de",
"https://git.kernel.org/stable/c/b2cd682324b889011874cf844b7c7efa97c97296",
"https://git.kernel.org/stable/c/cb732d027aa18e1fcf9d2797f47d20b179ebc59c",
"https://github.com/advisories/GHSA-pfp2-jmv8-4pwj"
],
"repository_advisory_url": null,
"severity": "unknown",
"source_code_location": "",
"summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/gud: validate...",
"type": "unreviewed",
"updated_at": "2026-09-25T12:31:49Z",
"url": "https://api.github.com/advisories/GHSA-pfp2-jmv8-4pwj",
"vulnerabilities": [],
"withdrawn_at": null
} |
|---|
Text
In the Linux kernel, the following vulnerability has been resolved:
drm/gud: validate...
In the Linux kernel, the following vulnerability has been resolved:
drm/gud: validate GUD_ROTATION_0 is present in supported rotations
The rotation argument to drm_plane_create_rotation_property() is set to
DRM_MODE_ROTATE_0, and the device reported rotation bitmask is used as
the supported_rotations argument. The driver never validates that
GUD_ROTATION_0 is present, so a device that omits it from its
GUD_PROPERTY_ROTATION triggers the
WARN_ON(rotation & ~supported_rotations) in
drm_plane_create_rotation_property()
Fix this by skipping the creation of rotation property if the device
doesn't have the GUD_ROTATION_0 bit