CVE-2026-98886
Published Oct 23, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: drm/gma500: return errors from Oaktrail HDMI I2C reads xfer_read() waits for the HDMI I2C transaction to reach I2C_TRANSACTION_DONE, but it ignores both timeout and signal returns from wait_for_completion_interruptible_timeout(). If the interrupt never advances the transaction state, the loop can wait forever. Return -ETIMEDOUT when the completion wait expires, propagate interrupted waits, and make the I2C master_xfer callback return the first transfer error instead of reporting a successful message count.
Is your site exposed to CVE-2026-98886?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/09a950950e7e4e74e021e60941c8e816ef1b4f71
https://git.kernel.org/stable/c/15c6d7f7127a53b7312232178ecf03e5850161d2
https://git.kernel.org/stable/c/898d209157fe2a245f7d9fe28c5921037d8b5033
https://git.kernel.org/stable/c/8add43887cca1fe11a0ded62199ce726901d3f20
https://git.kernel.org/stable/c/9b5ce5c496efd20c1c662cedba88465d39ec1f93
https://git.kernel.org/stable/c/c268df0653ab07bafc3d191e74ea097e3d9b9e69
https://git.kernel.org/stable/c/f85e8224bd4e1a0939cbfe13a6220fbddf61127c
Frequently Asked Questions
What is CVE-2026-98886? +
In the Linux kernel, the following vulnerability has been resolved:
drm/gma500: return errors from Oaktrail HDMI I2C reads
xfer_read() waits for the HDMI I2C transaction to reach
I2C_TRANSACTION_DONE, but it ignores both timeout and signal returns from
wait_for_completion_interruptible_timeout(). If the interrupt never
advances the transaction state, the loop can wait forever.
Return -ETIMEDOUT when the completion wait expires, propagate interrupted
waits, and make the I2C master_xfer callback return the first transfer
error instead of reporting a successful message count.
How do I check if I'm vulnerable to CVE-2026-98886? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.