CVE-2026-98886

Description

In the Linux kernel, the following vulnerability has been resolved: drm/gma500: return errors from Oaktrail HDMI I2C reads xfer_read() waits for the HDMI I2C transaction to reach I2C_TRANSACTION_DONE, but it ignores both timeout and signal returns from wait_for_completion_interruptible_timeout(). If the interrupt never advances the transaction state, the loop can wait forever. Return -ETIMEDOUT when the completion wait expires, propagate interrupted waits, and make the I2C master_xfer callback return the first transfer error instead of reporting a successful message count.

Is your site exposed to CVE-2026-98886?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0019

Probability of exploitation

0.08%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/09a950950e7e4e74e021e60941c8e816ef1b4f71 https://git.kernel.org/stable/c/15c6d7f7127a53b7312232178ecf03e5850161d2 https://git.kernel.org/stable/c/898d209157fe2a245f7d9fe28c5921037d8b5033 https://git.kernel.org/stable/c/8add43887cca1fe11a0ded62199ce726901d3f20 https://git.kernel.org/stable/c/9b5ce5c496efd20c1c662cedba88465d39ec1f93 https://git.kernel.org/stable/c/c268df0653ab07bafc3d191e74ea097e3d9b9e69 https://git.kernel.org/stable/c/f85e8224bd4e1a0939cbfe13a6220fbddf61127c

Frequently Asked Questions

What is CVE-2026-98886? +

In the Linux kernel, the following vulnerability has been resolved: drm/gma500: return errors from Oaktrail HDMI I2C reads xfer_read() waits for the HDMI I2C transaction to reach I2C_TRANSACTION_DONE, but it ignores both timeout and signal returns from wait_for_completion_interruptible_timeout(). If the interrupt never advances the transaction state, the loop can wait forever. Return -ETIMEDOUT when the completion wait expires, propagate interrupted waits, and make the I2C master_xfer callback return the first transfer error instead of reporting a successful message count.

How do I check if I'm vulnerable to CVE-2026-98886? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.