# CVE-2026-98148: Linux kernel drm/gud rotation validation missing

Source: https://junglewise.ai/threats/cve-2026-98148-in-the-linux-kernel-the-following-vulnerability-has-been-resolved  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-25. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-98148 · Severity: info · Published 2026-09-25

The Linux kernel's GUD USB display driver did not validate that a required rotation flag was present before creating rotation properties. A malformed USB device could trigger a kernel warning, potentially causing system instability or denial of service.

Technologies: [Unknown Linux kernel](https://junglewise.ai/threats/technologies/unknown-linux-kernel). Vendors: [Unknown](https://junglewise.ai/threats/vendors/unknown).

## Quick answers

**Is CVE-2026-98148 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-98148 being exploited in the wild.

**How severe is CVE-2026-98148?** Informational severity, published 25 September 2026.

**Which products and versions are affected?** Unknown Linux kernel affected versions include 6.x and stable branches; introduced in commit 40e1a70b4aed.

**Is there a fix for CVE-2026-98148?** A patch was published on 2026-08-21: Fix committed upstream Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-98148 attacked?** It is attacked from the adjacent network, in an operating system.

**Am I affected by CVE-2026-98148?** Check whether you run Unknown Linux kernel at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The GUD driver invokes drm_plane_create_rotation_property() with a rotation bitmask from the device, but never validates that GUD_ROTATION_0 is set, triggering a WARN_ON in the DRM core. The fix adds a validation check to skip rotation property creation if the flag is absent. This is a kernel warning/assertion validation issue affecting the display driver stack.

## Affected products

- <UNKNOWN> Linux kernel affected versions include 6.x and stable branches; introduced in commit 40e1a70b4aed

## Timeline

- 2026-09-25: disclosed: Published on NVD
- 2026-08-21: patched: Fix committed upstream

## References

- [https://git.kernel.org/stable/c/876b33d8a9a00e9d4bbcbb7f55ad2c05974850de](https://git.kernel.org/stable/c/876b33d8a9a00e9d4bbcbb7f55ad2c05974850de)
- [https://git.kernel.org/stable/c/b2cd682324b889011874cf844b7c7efa97c97296](https://git.kernel.org/stable/c/b2cd682324b889011874cf844b7c7efa97c97296)

## Related threats

- [Linux kernel netfilter nft_byteorder multi-register bypass](https://junglewise.ai/threats/cve-2026-99285-in-the-linux-kernel-the-following-vulnerability-has-been-resolved)
- [Linux kernel GPIO null pointer dereference in shared GPIO lookup](https://junglewise.ai/threats/cve-2026-99257-in-the-linux-kernel-the-following-vulnerability-has-been-resolved)
- [Linux kernel NTFS race condition in page fault handler](https://junglewise.ai/threats/cve-2026-99241-in-the-linux-kernel-the-following-vulnerability-has-been-resolved)
- [Linux kernel i915 DMC firmware load address validation bypass](https://junglewise.ai/threats/cve-2026-99146-in-the-linux-kernel-the-following-vulnerability-has-been-resolved)
- [Linux kernel dm-integrity buffer overflow in inline mode](https://junglewise.ai/threats/cve-2026-99098-in-the-linux-kernel-the-following-vulnerability-has-been-resolved)