{"id":"CVE-2026-53347","title":"drm/virtio: Fix driver removal with disabled KMS","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/virtio: Fix driver removal with disabled KMS\n\nDRM atomic and modesetting aren't initialized if virtio-gpu driver built\nwith disabled KMS, leading to access of unini…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 72122c69d71784e390527819754ea456421c4501 < ed3e134700a2e07caa99b9bc0683ebbe0327c562","Linux >= 72122c69d71784e390527819754ea456421c4501 < 38a5f891cda6d121c149c94cda89c31ec7024ee3","Linux >= 72122c69d71784e390527819754ea456421c4501 < 19a6a00ff50c284f3a9818882ad2be58b33b790a","Linux >= 72122c69d71784e390527819754ea456421c4501 < 15e561869a8b4e4db69733be1d6f33770664f989","Linux >= 72122c69d71784e390527819754ea456421c4501 < f329e8325e054bd6d84d10904f8dd51137281b92","Linux 6.4"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:27:29.298386Z"},"published":"2026-07-01","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:34:21.927Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-53347","references":[{"url":"https://git.kernel.org/stable/c/ed3e134700a2e07caa99b9bc0683ebbe0327c562"},{"url":"https://git.kernel.org/stable/c/38a5f891cda6d121c149c94cda89c31ec7024ee3"},{"url":"https://git.kernel.org/stable/c/19a6a00ff50c284f3a9818882ad2be58b33b790a"},{"url":"https://git.kernel.org/stable/c/15e561869a8b4e4db69733be1d6f33770664f989"},{"url":"https://git.kernel.org/stable/c/f329e8325e054bd6d84d10904f8dd51137281b92"}],"tags":["cve.org"],"epss":0.0012,"epssPercentile":0.0183,"ingestedAt":"2026-11-06T16:57:43.245Z","slug":"CVE-2026-53347","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/virtio: Fix driver removal with disabled KMS\n\nDRM atomic and modesetting aren't initialized if virtio-gpu driver built\nwith disabled KMS, leading to access of uninitialized data on driver\nremoval/unbinding and crashing kernel. Fix it by skipping shutting down\natomic core with unavailable KMS.\n\n## Affected\n\n- `Linux >= 72122c69d71784e390527819754ea456421c4501 < ed3e134700a2e07caa99b9bc0683ebbe0327c562`\n- `Linux >= 72122c69d71784e390527819754ea456421c4501 < 38a5f891cda6d121c149c94cda89c31ec7024ee3`\n- `Linux >= 72122c69d71784e390527819754ea456421c4501 < 19a6a00ff50c284f3a9818882ad2be58b33b790a`\n- `Linux >= 72122c69d71784e390527819754ea456421c4501 < 15e561869a8b4e4db69733be1d6f33770664f989`\n- `Linux >= 72122c69d71784e390527819754ea456421c4501 < f329e8325e054bd6d84d10904f8dd51137281b92`\n- `Linux 6.4`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}