01 Record

CVE-2026-98148

drm/gud: validate GUD_ROTATION_0 is present in supported rotations

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

drm/gud: validate GUD_ROTATION_0 is present in supported rotations

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.11% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 1.4% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-10-27.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-09-25 10:36Z1 MO AGO

Last updated

2026-10-21 12:54Z7 DAYS AGO

Reserved

2026-09-25

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-754Improper Check for Unusual or Exceptional ConditionsClass
CWE-617Reachable AssertionBase

Data version

5.2

Document digest

f60ac9b64dff9cbfb144c543852bf46534eaf887068f61a0da215974779e1806

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux40e1a70b4aedf2859a1829991b48ef0ebe650bf2 to < ce7da178f1af4e9cbac4d0440c4002785546bfb5, 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 to < 962cdf2eedb2708eb99c25ffb56c6d6981d41ed6, 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 to < b2cd682324b889011874cf844b7c7efa97c97296, 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 to < 876b33d8a9a00e9d4bbcbb7f55ad2c05974850de, 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 to < cb732d027aa18e1fcf9d2797f47d20b179ebc59c, 5.13—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/ce7da178f1af4e9cbac4d0440c4002785546bfb5
git.kernel.orghttps://git.kernel.org/stable/c/962cdf2eedb2708eb99c25ffb56c6d6981d41ed6
git.kernel.orghttps://git.kernel.org/stable/c/b2cd682324b889011874cf844b7c7efa97c97296
git.kernel.orghttps://git.kernel.org/stable/c/876b33d8a9a00e9d4bbcbb7f55ad2c05974850de
git.kernel.orghttps://git.kernel.org/stable/c/cb732d027aa18e1fcf9d2797f47d20b179ebc59c

07 Fixed in

Debian 12

linux
No fix yet

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
No fix yet

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.