Skip to content
Heist/ feed
Back to feed
UnratedFix available

drm/gma500/oaktrail_lvds: fix hang on init failure

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: drm/gma500/oaktrail_lvds: fix hang on init failure The LVDS init code looks up an I2C adapter using i2c_get_adapter() and tries to read the EDID before falling back to allocating and registering its own adapter. The error handling does not separate these cases so on a late init failure it will try to deregister and free also an adapter that had previously been registered. Since i2c_get_adapter() takes another reference to the adapter, deregistration hangs indefinitely while waiting for the reference to be released. Fix this by only destroying adapters allocated during LVDS init on errors.

Products
Kernel
Affected versions
Not specified
Fixed versions
6.1.175, 6.12.91, 6.18.33, 6.6.141, 7.0.10
CVEs
CVE-2026-53279
Confirmed fixed CVEs
Not specified
Updated in this feed
3 Nov 2026, 03:47 UTC · Revision 1

Source evidence

drm/gma500/oaktrail_lvds: fix hang on init failure

core-osv · Original source

Published 26 Jun 2026, 19:40 UTC

In the Linux kernel, the following vulnerability has been resolved: drm/gma500/oaktrail_lvds: fix hang on init failure The LVDS init code looks up an I2C adapter using i2c_get_adapter() and tries to read the EDID before falling back to allocating and registering its own adapter. The error handling does not separate these cases so on a late init failure it will try to deregister and free also an adapter that had previously been registered. Since i2c_get_adapter() takes another reference to the adapter, deregistration hangs indefinitely while waiting for the reference to be released. Fix this by only destroying adapters allocated during LVDS init on errors.

osv:CVE-2026-53279

Kernel

Fixed versions: 6.1.175, 6.6.141, 6.12.91, 6.18.33, 7.0.10

Complete source record
{
  "id": "59e4841c47f3574351a5c969ebd8aeb3c6082e377243f3f7a24818c8d1bf4d3a",
  "url": "https://osv.dev/vulnerability/CVE-2026-53279",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "drm/gma500/oaktrail_lvds: fix hang on init failure",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: drm/gma500/oaktrail_lvds: fix hang on init failure The LVDS init code looks up an I2C adapter using i2c_get_adapter() and tries to read the EDID before falling back to allocating and registering its own adapter. The error handling does not separate these cases so on a late init failure it will try to deregister and free also an adapter that had previously been registered. Since i2c_get_adapter() takes another reference to the adapter, deregistration hangs indefinitely while waiting for the reference to be released. Fix this by only destroying adapters allocated during LVDS init on errors.",
    "evidence": "osv:CVE-2026-53279",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.1.175",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.6.141",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.12.91",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.18.33",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "7.0.10",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2026-53279",
      "aliases": [
        "CVE-2026-53279"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "a57ebfc0b4da16a3f36bfebb158198aab3e340f8"
                },
                {
                  "fixed": "5fe9f505d8578852c30668567bc3ce52e776e8c7"
                },
                {
                  "fixed": "4e04b564c005c9900643c56656d751ad677889be"
                },
                {
                  "fixed": "7877f7e231a8bd5c817af1491276550a5e195cd7"
                },
                {
                  "fixed": "ab9256936b58eb178caddcf5b5b1638f079909d2"
                },
                {
                  "fixed": "f6fc44af3bbd5ab0fb6bdec6f47decca11b38425"
                },
                {
                  "fixed": "657a091ab6d01d0091b77660c75cfed573c9a53e"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53279.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.0.0"
                },
                {
                  "fixed": "6.1.175"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.2.0"
                },
                {
                  "fixed": "6.6.141"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.7.0"
                },
                {
                  "fixed": "6.12.91"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.13.0"
                },
                {
                  "fixed": "6.18.33"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.19.0"
                },
                {
                  "fixed": "7.0.10"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53279.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:25.889296651Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/4e04b564c005c9900643c56656d751ad677889be",
        "https://git.kernel.org/stable/c/5fe9f505d8578852c30668567bc3ce52e776e8c7",
        "https://git.kernel.org/stable/c/657a091ab6d01d0091b77660c75cfed573c9a53e",
        "https://git.kernel.org/stable/c/7877f7e231a8bd5c817af1491276550a5e195cd7",
        "https://git.kernel.org/stable/c/ab9256936b58eb178caddcf5b5b1638f079909d2",
        "https://git.kernel.org/stable/c/f6fc44af3bbd5ab0fb6bdec6f47decca11b38425",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53279.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-53279",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53279.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-53279",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 492255,
  "published_at": "2026-06-26T19:40:41.489+00:00"
}