CVE-2026-98148: drm/gud: validate GUD_ROTATION_0 is present in supported rotations
In the Linux kernel, the following vulnerability has been resolved:
drm/gud: validate GUDROTATION0 is present in supported rotations
The rotation argument to drmplanecreaterotationproperty() is set to DRMMODEROTATE0, and the device reported rotation bitmask is used as the supportedrotations argument. The driver never validates that GUDROTATION0 is present, so a device that omits it from its GUDPROPERTYROTATION triggers the WARNON(rotation & ~supportedrotations) in drmplanecreaterotationproperty()
Fix this by skipping the creation of rotation property if the device doesn't have the GUDROTATION0 bit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In drm/gud, skip creation of the rotation property when GUD_ROTATION_0 is not present in the device's supported rotations, preventing drm_plane_create_rotation_property() from receiving unsupported rotations.
Event History
Frequently Asked Questions
What devices can trigger this condition?
A GUD device is affected if it reports a GUD_PROPERTY_ROTATION bitmask that omits GUD_ROTATION_0. The issue occurs when the driver uses that bitmask while creating the DRM rotation property.
What is the observable impact?
The invalid rotation capability report triggers the WARN_ON(rotation & ~supported_rotations) check in drm_plane_create_rotation_property(). The provided data describes a warning condition, not further impact such as privilege escalation or code execution.
What is the mitigation if the fix is not yet available?
Avoid creating or using the rotation property for GUD devices whose reported rotation capabilities do not include GUD_ROTATION_0. The resolved behavior is to skip rotation-property creation for those devices.