CVE-2026-98404

CVE-2026-98404

published October 14, 2026

CVSS
—
EPSS
0%
Percentile
11.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()

Smatch complains that returning a NULL here will lead to a NULL pointer

dereference in drm_mode_addfb2(). Return an error pointer instead.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00220 · 11.9th percentile
Published
2026-10-14T18:17Z
References (8)
https://git.kernel.org/stable/c/07de0b31dd64094cd7d25729beaf2ecae74daa72 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3fe8a33715265ecb24ca0bcd0a575c926da4277c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/45dc2788a5b0e1e2824d1f98af521bd3acc340d7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5eda6cda0031ba17559d56882353be39e568ec09 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/94579f24e2b526a04eb41050af0ba018c6f528e7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/974845d2535a250b180e62f9ed50284f312c01a3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/975f3cf302bb7d7336df4c630a7c07e12780ad10 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f1050a7d365283678b253828739d3866ae546a72 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 16 OCT 03:33Z
    EPSS moved — → 0%
    epss
  • 14 OCT 13:26Z
    drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()
    cvelistv5
  • 14 OCT 13:26Z
    drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()
    cvelistv5