In the Linux kernel, the following vulnerability has been resolved: drm/gma500: return errors from Oaktrail HDMI I2C reads xfer_read() waits for the… (CVE-2026-98886)

The Linux kernel's drm/gma500 driver had a flaw where the xfer_read() function waited for the HDMI I2C transaction to reach completion without properly handling timeout or signal interruptions from wait_for_completion_interruptible_timeout(). This could cause the function to wait indefinitely if the transaction state never advanced. The fix involves returning -ETIMEDOUT when the wait expires, propagating interrupted waits, and ensuring the I2C master_xfer callback returns the first transfer error instead of a successful message count.

If exploited, this vulnerability could cause the affected driver to hang indefinitely during HDMI I2C transactions, potentially leading to denial of service conditions on systems using the drm/gma500 driver with Oaktrail HDMI hardware. There is no indication of code execution or privilege escalation from the provided data.

A fix has been implemented in the Linux kernel to properly handle timeouts and interrupts during HDMI I2C reads in the drm/gma500 driver. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.