CVE-2026-53279
drm/gma500/oaktrail_lvds: fix hang on init failure
Description
In the Linux kernel, the following vulnerability has been resolved: drm/gma500/oaktrail_lvds: fix hang on init failure The LVDS init code looks up an I2C adapter using i2c_get_adapter() and tries to read the EDID before falling back to allocating and registering its own adapter. The error handling does not separate these cases so on a late init failure it will try to deregister and free also an adapter that had previously been registered. Since i2c_get_adapter() takes another reference to the adapter, deregistration hangs indefinitely while waiting for the reference to be released. Fix this by only destroying adapters allocated during LVDS init on errors.
INFO
Published Date :
June 26, 2026, 8:17 p.m.
Last Modified :
July 8, 2026, 3:58 a.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | [email protected] |
Solution
- Update the Linux kernel to the latest version.
- Verify proper initialization of LVDS components.
- Ensure adapter registration and deregistration logic is correct.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-53279.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-53279 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-53279
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-53279 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-53279 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Jul. 08, 2026
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE NVD-CWE-noinfo Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.141 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.12.91 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.13 up to (excluding) 6.18.33 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.19 up to (excluding) 7.0.10 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.0 up to (excluding) 6.1.175 Added Reference Type kernel.org: https://git.kernel.org/stable/c/4e04b564c005c9900643c56656d751ad677889be Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/5fe9f505d8578852c30668567bc3ce52e776e8c7 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/657a091ab6d01d0091b77660c75cfed573c9a53e Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/7877f7e231a8bd5c817af1491276550a5e195cd7 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/ab9256936b58eb178caddcf5b5b1638f079909d2 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/f6fc44af3bbd5ab0fb6bdec6f47decca11b38425 Types: Patch -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 26, 2026
Action Type Old Value New Value Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': 'a57ebfc0b4da16a3f36bfebb158198aab3e340f8', 'lessThan': '5fe9f505d8578852c30668567bc3ce52e776e8c7', 'versionType': 'git'}, {'status': 'affected', 'version': 'a57ebfc0b4da16a3f36bfebb158198aab3e340f8', 'lessThan': '4e04b564c005c9900643c56656d751ad677889be', 'versionType': 'git'}, {'status': 'affected', 'version': 'a57ebfc0b4da16a3f36bfebb158198aab3e340f8', 'lessThan': '7877f7e231a8bd5c817af1491276550a5e195cd7', 'versionType': 'git'}, {'status': 'affected', 'version': 'a57ebfc0b4da16a3f36bfebb158198aab3e340f8', 'lessThan': 'ab9256936b58eb178caddcf5b5b1638f079909d2', 'versionType': 'git'}, {'status': 'affected', 'version': 'a57ebfc0b4da16a3f36bfebb158198aab3e340f8', 'lessThan': 'f6fc44af3bbd5ab0fb6bdec6f47decca11b38425', 'versionType': 'git'}, {'status': 'affected', 'version': 'a57ebfc0b4da16a3f36bfebb158198aab3e340f8', 'lessThan': '657a091ab6d01d0091b77660c75cfed573c9a53e', 'versionType': 'git'}], 'programFiles': ['drivers/gpu/drm/gma500/oaktrail_lvds.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '6.0'}, {'status': 'unaffected', 'version': '0', 'lessThan': '6.0', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '6.1.175', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.141', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.91', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.33', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.0.10', 'versionType': 'semver', 'lessThanOrEqual': '7.0.*'}, {'status': 'unaffected', 'version': '7.1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/gpu/drm/gma500/oaktrail_lvds.c'], 'defaultStatus': 'affected'}] Added Description In the Linux kernel, the following vulnerability has been resolved: drm/gma500/oaktrail_lvds: fix hang on init failure The LVDS init code looks up an I2C adapter using i2c_get_adapter() and tries to read the EDID before falling back to allocating and registering its own adapter. The error handling does not separate these cases so on a late init failure it will try to deregister and free also an adapter that had previously been registered. Since i2c_get_adapter() takes another reference to the adapter, deregistration hangs indefinitely while waiting for the reference to be released. Fix this by only destroying adapters allocated during LVDS init on errors. Added Reference https://git.kernel.org/stable/c/4e04b564c005c9900643c56656d751ad677889be Added Reference https://git.kernel.org/stable/c/5fe9f505d8578852c30668567bc3ce52e776e8c7 Added Reference https://git.kernel.org/stable/c/657a091ab6d01d0091b77660c75cfed573c9a53e Added Reference https://git.kernel.org/stable/c/7877f7e231a8bd5c817af1491276550a5e195cd7 Added Reference https://git.kernel.org/stable/c/ab9256936b58eb178caddcf5b5b1638f079909d2 Added Reference https://git.kernel.org/stable/c/f6fc44af3bbd5ab0fb6bdec6f47decca11b38425