CVE-2026-98875 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gsp: add SEC2 to GA100 chip table The booter-load and booter-unload firmware run on the SEC2 falcon. During tu102_gsp_oneinit(), the booter constructor needs device->sec2 to access the SEC2 falcon. Without the .sec2 entry, device->sec2 is NULL and this dereference crashes during GSP-RM boot.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Linux Kernel

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/604d0efb17cc0dd197e089134736ac2698d5fca7
https://git.kernel.org/stable/c/f29267ace04283e76f92a74d9a7f4fcfcb32f484
https://git.kernel.org/stable/c/feb1ad41281aed00e8a741942e56a1cd774e8342

History

Fri, 23 Oct 2026 14:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Linux linux
Vendors & Products		Linux linux

Fri, 23 Oct 2026 12:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gsp: add SEC2 to GA100 chip table The booter-load and booter-unload firmware run on the SEC2 falcon. During tu102_gsp_oneinit(), the booter constructor needs device->sec2 to access the SEC2 falcon. Without the .sec2 entry, device->sec2 is NULL and this dereference crashes during GSP-RM boot.
Title		drm/nouveau/gsp: add SEC2 to GA100 chip table
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/604d0efb17cc0dd197e089134736ac2698d5fca7 https://git.kernel.org/stable/c/f29267ace04283e76f92a74d9a7f4fcfcb32f484 https://git.kernel.org/stable/c/feb1ad41281aed00e8a741942e56a1cd774e8342

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-10-23T11:37:19.955Z

Updated: 2026-10-23T11:37:19.955Z

Reserved: 2026-09-25T10:25:14.377Z

Link: CVE-2026-98875

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-10-23T12:18:20.987

Modified: 2026-10-23T12:18:20.987

Link: CVE-2026-98875

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98875", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.377Z", "datePublished": "2026-10-23T11:37:19.955Z", "dateUpdated": "2026-10-23T11:37:19.955Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-23T11:37:19.955Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau/gsp: add SEC2 to GA100 chip table\n\nThe booter-load and booter-unload firmware run on the SEC2 falcon.\nDuring tu102_gsp_oneinit(), the booter constructor needs device->sec2\nto access the SEC2 falcon.\n\nWithout the .sec2 entry, device->sec2 is NULL and this dereference\ncrashes during GSP-RM boot."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/nouveau/nvkm/engine/device/base.c"], "versions": [{"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "feb1ad41281aed00e8a741942e56a1cd774e8342", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "f29267ace04283e76f92a74d9a7f4fcfcb32f484", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "604d0efb17cc0dd197e089134736ac2698d5fca7", "status": "affected", "versionType": "git"}, {"version": "0", "lessThan": "6.6.158", "status": "affected", "versionType": "semver"}, {"version": "0", "lessThan": "6.18.53", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/nouveau/nvkm/engine/device/base.c"], "versions": [{"version": "6.6.158", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.53", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "6.6.158"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "6.18.53"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/feb1ad41281aed00e8a741942e56a1cd774e8342"}, {"url": "https://git.kernel.org/stable/c/f29267ace04283e76f92a74d9a7f4fcfcb32f484"}, {"url": "https://git.kernel.org/stable/c/604d0efb17cc0dd197e089134736ac2698d5fca7"}], "title": "drm/nouveau/gsp: add SEC2 to GA100 chip table", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/gpu/drm/nouveau/nvkm/engine/device/base.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "feb1ad41281aed00e8a741942e56a1cd774e8342", "status": "affected", "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "versionType": "git"}, {"lessThan": "f29267ace04283e76f92a74d9a7f4fcfcb32f484", "status": "affected", "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "versionType": "git"}, {"lessThan": "604d0efb17cc0dd197e089134736ac2698d5fca7", "status": "affected", "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "versionType": "git"}, {"lessThan": "6.6.158", "status": "affected", "version": "0", "versionType": "semver"}, {"lessThan": "6.18.53", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/gpu/drm/nouveau/nvkm/engine/device/base.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.158", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.53", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau/gsp: add SEC2 to GA100 chip table\n\nThe booter-load and booter-unload firmware run on the SEC2 falcon.\nDuring tu102_gsp_oneinit(), the booter constructor needs device->sec2\nto access the SEC2 falcon.\n\nWithout the .sec2 entry, device->sec2 is NULL and this dereference\ncrashes during GSP-RM boot."}], "id": "CVE-2026-98875", "lastModified": "2026-10-23T12:18:20.987", "metrics": {}, "published": "2026-10-23T12:18:20.987", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/604d0efb17cc0dd197e089134736ac2698d5fca7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f29267ace04283e76f92a74d9a7f4fcfcb32f484"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/feb1ad41281aed00e8a741942e56a1cd774e8342"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}