CVE-2026-98875Medium· 4.4▾ SunlitA flaw was found in the Linux kernel's Nouveau GPU driver. During graphics hardware initialization on systems with GA100 chipsets, the driver fails to properly configure an internal security processor entry, leaving a required pointer unin…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 24.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 25.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.2%
Last analysed / modified upstream
— → 4.4
none → medium
A flaw was found in the Linux kernel's Nouveau GPU driver. During graphics hardware initialization on systems with GA100 chipsets, the driver fails to properly configure an internal security processor entry, leaving a required pointer uninitialized. A local user or process interacting with the graphics driver can trigger a null pointer dereference, crashing the kernel and resulting in a Denial of Service (DoS).
kernel: drm/nouveau/gsp: add SEC2 to GA100 chip table — rated Moderate by Red Hat. Released 2026-10-23, updated 2026-10-26.
Not affected:
Refer to the advisory for fix availability.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-98870Medium· 6.5kernel: ksmbd: remove stale channels from all sessions on teardown (CVE-2026-98870)
CVE-2026-98876Medium· 4.1kernel: host1x: bus: Fix missing ops null check in error teardown (CVE-2026-98876)
CVE-2026-98877Medium· 4.7kernel: irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed (CVE-2026-98877)
CVE-2026-105923Medium· 5.5qt6: qt6: Denial of Service via crafted SVG in VectorImage (CVE-2026-105923)
CVE-2026-114046Medium· 6.5freerdp: FreeRDP: null pointer dereference in smartcard emulation via crafted reader name (CVE-2026-114046)
CVE-2024-57804High· 7.3scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs