CVE-2026-53279: drm/gma500/oaktrail_lvds: fix hang on init failure
In the Linux kernel, the following vulnerability has been resolved:
drm/gma500/oaktraillvds: fix hang on init failure
The LVDS init code looks up an I2C adapter using i2cgetadapter() and tries to read the EDID before falling back to allocating and registering its own adapter.
The error handling does not separate these cases so on a late init failure it will try to deregister and free also an adapter that had previously been registered. Since i2cgetadapter() takes another reference to the adapter, deregistration hangs indefinitely while waiting for the reference to be released.
Fix this by only destroying adapters allocated during LVDS init on errors.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In drm/gma500/oaktrail_lvds LVDS init, destroy (deregister/free) only the I2C adapter that was allocated during the LVDS init path, and avoid deregistering/freeing any adapter that was only looked up via i2c_get_adapter() (i.e., prevent deregistration from hanging on late init failure when the adapter was previously registered).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53279?
CVE-2026-53279 has a risk rating of 17.
How do I fix CVE-2026-53279?
To fix CVE-2026-53279, update to the latest version of the Linux kernel where the vulnerability has been resolved.
What systems are affected by CVE-2026-53279?
CVE-2026-53279 affects versions of the Linux kernel that include the drm/gma500/oaktrail_lvds component.
What type of vulnerability is CVE-2026-53279?
CVE-2026-53279 is a vulnerability related to initialization failure handling in the LVDS driver code.
What is the impact of CVE-2026-53279?
The impact of CVE-2026-53279 includes potential hangs during the initialization of the LVDS display adapter.