CVE-2026-98404

A flaw of low impact was found in the Linux kernel's VirtIO GPU driver. When user framebuffer creation encounters an error, virtio_gpu_user_framebuffer_create() improperly returns NULL instead of an error pointer; because drm_mode_addfb2() checks the return value with IS_ERR(), it treats NULL as a valid framebuffer and later dereferences it, resulting in a NULL pointer dereference and a kernel crash. A local user with access to the DRM subsystem could trigger this failure path to cause a denial of service (system crash); there is no impact on confidentiality or integrity. Red Hat Enterprise Linux 6 and 7 are not affected because the vulnerable code is not present in those kernels. For the affected products (Red Hat Enterprise Linux 8, 9, and 10, Red Hat In-Vehicle OS, and the OpenShift Container Platform RHCOS kernels), the fix is deferred: this is a low severity, local-only denial of service with a simple, contained fix, so it will be addressed in a future scheduled kernel update rather than an immediate z-stream update. The residual risk is limited to a local denial of service by an attacker who already has local access and DRM device permissions. While the CVSS:3.1 score of 5.5 (Moderate) reflects high availability impact, Red Hat's overall impact rating is Low because exploitation requires local access and privileges, and the flaw provides no confidentiality, integrity, or privilege escalation impact.