In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gsp: add SEC2 to GA100 chip table The booter-load and booter-unload… (CVE-2026-98875)

The vulnerability in the Linux kernel's drm/nouveau/gsp subsystem concerned the handling of the SEC2 falcon on GA100 chip tables. Specifically, during the tu102_gsp_oneinit() function, the booter constructor requires device->sec2 to access the SEC2 falcon. If the .sec2 entry was missing, device->sec2 was NULL, causing a NULL pointer dereference and crash during the GSP-RM boot. The fix involved adding SEC2 to the GA100 chip table to prevent this dereference and subsequent crash.

The impact of this vulnerability is a denial of service condition due to a kernel crash triggered by a NULL pointer dereference during the boot process of the GSP-RM subsystem. There is no indication of code execution or privilege escalation. No known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel by adding SEC2 to the GA100 chip table, resolving the NULL pointer dereference and preventing the crash. Users should update to the fixed kernel version containing this patch. Patch status is confirmed by the vendor advisory describing the fix.