CVE-2026-53279

Analyzed Analyzed - Analysis Complete

Kernel LVDS Init Failure in Linux Kernel

Publication date: 2026-06-26

Last updated on: 2026-07-08

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/gma500/oaktrail_lvds: fix hang on init failure The LVDS init code looks up an I2C adapter using i2c_get_adapter() and tries to read the EDID before falling back to allocating and registering its own adapter. The error handling does not separate these cases so on a late init failure it will try to deregister and free also an adapter that had previously been registered. Since i2c_get_adapter() takes another reference to the adapter, deregistration hangs indefinitely while waiting for the reference to be released. Fix this by only destroying adapters allocated during LVDS init on errors.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-26

Last Modified

2026-07-08

Generated

2026-07-17

AI Q&A

2026-06-26

EPSS Evaluated

2026-07-15

NVD

CVE-2026-53279

EUVD

EUVD-2026-39884

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 6.2 (inc) to 6.6.141 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.91 (exc)
linux	linux_kernel	From 6.13 (inc) to 6.18.33 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.0.10 (exc)
linux	linux_kernel	From 6.0 (inc) to 6.1.175 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's drm/gma500/oaktrail_lvds component. The LVDS initialization code attempts to look up an I2C adapter and read the EDID. If this fails late in the initialization, the error handling incorrectly tries to deregister and free an adapter that was previously registered. Because the i2c_get_adapter() function increases the reference count on the adapter, attempting to deregister it while references still exist causes the deregistration process to hang indefinitely.

The fix involves changing the error handling so that only adapters allocated during the LVDS initialization are destroyed on errors, preventing the hang.

Impact Analysis

This vulnerability can cause the system to hang indefinitely during the LVDS initialization process if an error occurs late in the initialization. This can lead to system instability or unresponsiveness related to display initialization, potentially affecting device usability or requiring a reboot to recover.

Mitigation Strategies

The vulnerability has been resolved in the Linux kernel by fixing the error handling in the drm/gma500/oaktrail_lvds driver. To mitigate this vulnerability, you should update your Linux kernel to a version that includes this fix.

Identify your current Linux kernel version.
Check for available kernel updates from your distribution that include the fix for this issue.
Apply the kernel update and reboot your system.

Hi! I’m here to help you understand CVE-2026-53279. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70