CVE-2026-98875

Source
https://cve.org/CVERecord?id=CVE-2026-98875
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98875.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98875
Downstream
Published
2026-10-23T11:37:19Z
Modified
2026-10-28T03:01:48Z
Summary
drm/nouveau/gsp: add SEC2 to GA100 chip table
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/nouveau/gsp: add SEC2 to GA100 chip table

The booter-load and booter-unload firmware run on the SEC2 falcon. During tu102_gsp_oneinit(), the booter constructor needs device->sec2 to access the SEC2 falcon.

Without the .sec2 entry, device->sec2 is NULL and this dereference crashes during GSP-RM boot.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98875.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
176fdcbddfd288408ce8571c1760ad618d962096
Fixed
f29267ace04283e76f92a74d9a7f4fcfcb32f484
Fixed
604d0efb17cc0dd197e089134736ac2698d5fca7

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98875.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.18.53

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98875.json"