NULL Pointer Dereference Vulnerability in Linux Kernel's Virtio GPU Module

CVE-2026-98404

What is CVE-2026-98404?

A vulnerability exists in the Linux kernel regarding the virtio GPU module where a NULL pointer can inadvertently be used in place of an expected error pointer. This could result in system instability due to a NULL pointer dereference when handling framebuffer creation requests. Proper handling is crucial to prevent potential crashes or undefined behavior during graphic operations in environments utilizing Virtio GPU technology.

References