Description
In the Linux kernel, the following vulnerability has been resolved:

drm/gud: validate GUD_ROTATION_0 is present in supported rotations

The rotation argument to drm_plane_create_rotation_property() is set to
DRM_MODE_ROTATE_0, and the device reported rotation bitmask is used as
the supported_rotations argument. The driver never validates that
GUD_ROTATION_0 is present, so a device that omits it from its
GUD_PROPERTY_ROTATION triggers the
WARN_ON(rotation & ~supported_rotations) in
drm_plane_create_rotation_property()

Fix this by skipping the creation of rotation property if the device
doesn't have the GUD_ROTATION_0 bit
Published: 2026-09-25
Score: n/a
EPSS: n/a
KEV: No
Impact: No direct security impact
Action: Apply Patch
AI Analysis

Impact

In the Linux kernel’s DRM GUD driver, the rotation property for a plane is created with a rotation value of DRM_MODE_ROTATE_0. The driver receives a bitmask of supported rotations from the device, but it never verifies that the GUD_ROTATION_0 flag is included. If a device omits this flag, the check WARN_ON(rotation & ~supported_rotations) in drm_plane_create_rotation_property() fires, resulting in a warning message in the kernel log. The patch removes the creation of the rotation property when the required flag is not present, preventing the warning.

Affected Systems

All Linux kernel releases that contain the DRM GUD component are affected. The issue is tied to the generic DRM subsystem and is not limited to a specific vendor or kernel series. Devices that advertise GUD_PROPERTY_ROTATION without the GUD_ROTATION_0 flag will trigger the warning. Administrators should verify that their running kernel includes the patch that suppresses the faulty check.

Risk and Exploitability

The vulnerability does not provide a direct security impact beyond the appearance of a warning in the kernel log. No CVSS score is supplied, and the issue is not listed in CISA’s KEV catalog. Because it requires the device to omit the GUD_ROTATION_0 flag, the only observable effect is log noise or a misconfiguration. No privilege escalation or remote code execution is possible from the information available.

Generated by OpenCVE AI on September 25, 2026 at 13:47 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest Linux kernel patch removing the faulty rotation check, such as commit 876b33d8a9a00e9d4bbcbb7f55ad2c05974850de.
  • If a kernel upgrade cannot be performed immediately, configure the device firmware or driver to include the GUD_ROTATION_0 bit in its GUD_PROPERTY_ROTATION mask before the driver loads.
  • Monitor kernel logs for WARN_ON entries from drm_plane_create_rotation_property() to detect any lingering misconfigurations.

Generated by OpenCVE AI on September 25, 2026 at 13:47 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 25 Sep 2026 14:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-689

Fri, 25 Sep 2026 10:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/gud: validate GUD_ROTATION_0 is present in supported rotations The rotation argument to drm_plane_create_rotation_property() is set to DRM_MODE_ROTATE_0, and the device reported rotation bitmask is used as the supported_rotations argument. The driver never validates that GUD_ROTATION_0 is present, so a device that omits it from its GUD_PROPERTY_ROTATION triggers the WARN_ON(rotation & ~supported_rotations) in drm_plane_create_rotation_property() Fix this by skipping the creation of rotation property if the device doesn't have the GUD_ROTATION_0 bit
Title drm/gud: validate GUD_ROTATION_0 is present in supported rotations
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-09-25T10:36:21.562Z

Reserved: 2026-09-25T10:25:14.320Z

Link: CVE-2026-98148

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-25T11:17:46.363

Modified: 2026-09-25T11:17:46.363

Link: CVE-2026-98148

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-25T16:00:16Z

Weaknesses
  • CWE-689

    Permission Race Condition During Resource Copy