---
id: CVE-2026-53279
title: 'drm/gma500/oaktrail_lvds: fix hang on init failure'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/gma500/oaktrail_lvds: fix hang on init failure

  The LVDS init code looks up an I2C adapter using i2c_get_adapter() and
  tries to read the EDID before falling back to…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= a57ebfc0b4da16a3f36bfebb158198aab3e340f8 <
    5fe9f505d8578852c30668567bc3ce52e776e8c7
  - >-
    Linux >= a57ebfc0b4da16a3f36bfebb158198aab3e340f8 <
    4e04b564c005c9900643c56656d751ad677889be
  - >-
    Linux >= a57ebfc0b4da16a3f36bfebb158198aab3e340f8 <
    7877f7e231a8bd5c817af1491276550a5e195cd7
  - >-
    Linux >= a57ebfc0b4da16a3f36bfebb158198aab3e340f8 <
    ab9256936b58eb178caddcf5b5b1638f079909d2
  - >-
    Linux >= a57ebfc0b4da16a3f36bfebb158198aab3e340f8 <
    f6fc44af3bbd5ab0fb6bdec6f47decca11b38425
  - >-
    Linux >= a57ebfc0b4da16a3f36bfebb158198aab3e340f8 <
    657a091ab6d01d0091b77660c75cfed573c9a53e
  - Linux 6.0
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:24:56.777829Z'
published: '2026-06-26'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:34:17.401Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-53279'
references:
  - url: 'https://git.kernel.org/stable/c/5fe9f505d8578852c30668567bc3ce52e776e8c7'
  - url: 'https://git.kernel.org/stable/c/4e04b564c005c9900643c56656d751ad677889be'
  - url: 'https://git.kernel.org/stable/c/7877f7e231a8bd5c817af1491276550a5e195cd7'
  - url: 'https://git.kernel.org/stable/c/ab9256936b58eb178caddcf5b5b1638f079909d2'
  - url: 'https://git.kernel.org/stable/c/f6fc44af3bbd5ab0fb6bdec6f47decca11b38425'
  - url: 'https://git.kernel.org/stable/c/657a091ab6d01d0091b77660c75cfed573c9a53e'
tags:
  - cve.org
epss: 0.00162
epssPercentile: 0.05468
ingestedAt: '2026-11-06T16:57:43.256Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/gma500/oaktrail_lvds: fix hang on init failure

The LVDS init code looks up an I2C adapter using i2c_get_adapter() and
tries to read the EDID before falling back to allocating and registering
its own adapter.

The error handling does not separate these cases so on a late init
failure it will try to deregister and free also an adapter that had
previously been registered. Since i2c_get_adapter() takes another
reference to the adapter, deregistration hangs indefinitely while
waiting for the reference to be released.

Fix this by only destroying adapters allocated during LVDS init on
errors.

## Affected

- `Linux >= a57ebfc0b4da16a3f36bfebb158198aab3e340f8 < 5fe9f505d8578852c30668567bc3ce52e776e8c7`
- `Linux >= a57ebfc0b4da16a3f36bfebb158198aab3e340f8 < 4e04b564c005c9900643c56656d751ad677889be`
- `Linux >= a57ebfc0b4da16a3f36bfebb158198aab3e340f8 < 7877f7e231a8bd5c817af1491276550a5e195cd7`
- `Linux >= a57ebfc0b4da16a3f36bfebb158198aab3e340f8 < ab9256936b58eb178caddcf5b5b1638f079909d2`
- `Linux >= a57ebfc0b4da16a3f36bfebb158198aab3e340f8 < f6fc44af3bbd5ab0fb6bdec6f47decca11b38425`
- `Linux >= a57ebfc0b4da16a3f36bfebb158198aab3e340f8 < 657a091ab6d01d0091b77660c75cfed573c9a53e`
- `Linux 6.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
