CVE-2026-53279 Details
Description
In the Linux kernel, the following vulnerability has been resolved: drm/gma500/oaktrail_lvds: fix hang on init failure The LVDS init code looks up an I2C adapter using i2c_get_adapter() and tries to read the EDID before falling back to allocating and registering its own adapter. The error handling does not separate these cases so on a late init failure it will try to deregister and free also an adapter that had previously been registered. Since i2c_get_adapter() takes another reference to the adapter, deregistration hangs indefinitely while waiting for the reference to be released. Fix this by only destroying adapters allocated during LVDS init on errors.
A vulnerability in the Linux kernel's handling of I2C adapters during the initialization of LVDS (Low-Voltage Differential Signaling) can lead to a hang condition. This issue arises in the DRM (Direct Rendering Manager) component for GMA500 graphics, specifically in the Oaktrail LVDS driver. The problem occurs when the LVDS initialization code attempts to read the EDID (Extended Display Identification Data) from an I2C adapter. If this operation fails, the code tries to deregister and free the adapter, including one that was previously registered. However, the deregistration process can hang indefinitely, waiting for a reference to be released, because the I2C adapter lookup function increments the reference count. The vulnerability affects several versions of the Linux kernel.
The vulnerability has been addressed by modifying the LVDS initialization code to only destroy adapters that were allocated during the LVDS initialization process, and only in the event of an error. Users should update to the latest version of the Linux kernel where this fix has been applied.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/4e04b564c005c9900643c56656d751ad677889be | kernel.org | Patch |
| https://git.kernel.org/stable/c/5fe9f505d8578852c30668567bc3ce52e776e8c7 | kernel.org | Patch |
| https://git.kernel.org/stable/c/657a091ab6d01d0091b77660c75cfed573c9a53e | kernel.org | Patch |
| https://git.kernel.org/stable/c/7877f7e231a8bd5c817af1491276550a5e195cd7 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ab9256936b58eb178caddcf5b5b1638f079909d2 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f6fc44af3bbd5ab0fb6bdec6f47decca11b38425 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.0, < 6.1.175 >= 6.2, < 6.6.141 >= 6.7, < 6.12.91 >= 6.13, < 6.18.33 >= 6.19, < 7.0.10 7.1 rc1 7.1 rc2 7.1 rc3 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 8, 2026 | Initial Analysis | [email protected] |
| Jun 26, 2026 | New CVE Received | kernel.org |