In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix NULL pointer dereference on fence allocation failure… (CVE-2026-98508)

The vulnerability in the Linux kernel's drm/virtio driver involves a failure to check the return value of virtio_gpu_fence_alloc(), which can return NULL under memory pressure. The caller, such as virtio_gpu_init_submit(), does not verify this and passes the NULL pointer to virtio_gpu_fence_event_create(), which dereferences it unconditionally. This results in a NULL pointer dereference and a kernel crash. The issue was identified during fuzzing with Syzkaller and affects the virtio GPU driver code paths related to fence allocation and submission.

This vulnerability can cause a kernel crash (general protection fault) due to a NULL pointer dereference in the virtio GPU driver. Such crashes can lead to denial of service conditions on affected systems. There is no information about privilege escalation or code execution impacts.

A fix for this vulnerability has been applied in the Linux kernel. Users should update to a kernel version that includes this patch to prevent the NULL pointer dereference. Since this is a kernel-level issue, applying the official kernel update is the recommended remediation. Patch status is not explicitly confirmed in the provided data; users should verify with the vendor or kernel release notes for the specific fixed version.