CVE-2026-98404
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() Smatch complains that returning a NULL here will lead to a NULL pointer dereference in drm_mode_addfb2(). Return an error pointer instead.
Severity
Not scored
CVSS score
Not available
Vulnerability status
Received
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2026-10-14 14:17:51.483000
Last modified
2026-10-19 10:18:45.360000
View original CVE JSON
{
"id": "CVE-2026-98404",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2026-10-14T14:17:51.483",
"lastModified": "2026-10-19T10:18:45.360",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()\n\nSmatch complains that returning a NULL here will lead to a NULL pointer\ndereference in drm_mode_addfb2(). Return an error pointer instead."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"drivers/gpu/drm/virtio/virtgpu_display.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "dc5698e80cf724770283e10414054662bdf6ccfa",
"lessThan": "975f3cf302bb7d7336df4c630a7c07e12780ad10",
"versionType": "git",
"status": "affected"
},
{
"version": "dc5698e80cf724770283e10414054662bdf6ccfa",
"lessThan": "07de0b31dd64094cd7d25729beaf2ecae74daa72",
"versionType": "git",
"status": "affected"
},
{
"version": "dc5698e80cf724770283e10414054662bdf6ccfa",
"lessThan": "5eda6cda0031ba17559d56882353be39e568ec09",
"versionType": "git",
"status": "affected"
},
{
"version": "dc5698e80cf724770283e10414054662bdf6ccfa",
"lessThan": "3fe8a33715265ecb24ca0bcd0a575c926da4277c",
"versionType": "git",
"status": "affected"
},
{
"version": "dc5698e80cf724770283e10414054662bdf6ccfa",
"lessThan": "974845d2535a250b180e62f9ed50284f312c01a3",
"versionType": "git",
"status": "affected"
},
{
"version": "dc5698e80cf724770283e10414054662bdf6ccfa",
"lessThan": "45dc2788a5b0e1e2824d1f98af521bd3acc340d7",
"versionType": "git",
"status": "affected"
},
{
"version": "dc5698e80cf724770283e10414054662bdf6ccfa",
"lessThan": "f1050a7d365283678b253828739d3866ae546a72",
"versionType": "git",
"status": "affected"
},
{
"version": "dc5698e80cf724770283e10414054662bdf6ccfa",
"lessThan": "94579f24e2b526a04eb41050af0ba018c6f528e7",
"versionType": "git",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"drivers/gpu/drm/virtio/virtgpu_display.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "4.2",
"status": "affected"
},
{
"version": "0",
"lessThan": "4.2",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.10.271",
"lessThanOrEqual": "5.10.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.15.222",
"lessThanOrEqual": "5.15.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.189",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.158",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.111",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.18.53",
"lessThanOrEqual": "6.18.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.2.7",
"lessThanOrEqual": "7.2.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.3",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {},
"references": [
{
"url": "https://git.kernel.org/stable/c/07de0b31dd64094cd7d25729beaf2ecae74daa72",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/3fe8a33715265ecb24ca0bcd0a575c926da4277c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/45dc2788a5b0e1e2824d1f98af521bd3acc340d7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/5eda6cda0031ba17559d56882353be39e568ec09",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/94579f24e2b526a04eb41050af0ba018c6f528e7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/974845d2535a250b180e62f9ed50284f312c01a3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/975f3cf302bb7d7336df4c630a7c07e12780ad10",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/f1050a7d365283678b253828739d3866ae546a72",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}