Linux Kernel Vulnerability in Virtio-GPU Driver with Disabled KMS

CVE-2026-53347

What is CVE-2026-53347?

A significant vulnerability exists in the Linux kernel's virtio-gpu driver, specifically when built with disabled Kernel Mode Setting (KMS). This flaw can lead to scenarios where Digital Rights Management (DRM) atomic and mode-setting functionalities are not properly initialized. Consequently, this may result in access to uninitialized data upon driver removal or unbinding, causing kernel crashes. The issue has been addressed by modifying the shutdown process of the atomic core to prevent execution when KMS is unavailable, enhancing system stability.

References