CVE intelligence

CVE-2026-98148

Vulnerability intelligence

Published Sep 25, 2026Sources checked Nov 13, 2026

5.5MEDIUMCVSS out of 10

What this means

Review the available evidence

CVE-2026-98148 and is rated Medium severity with a CVSS score of 5.5. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

What to do next

Remediation and response

Microsoft Security Response Center guidance

Vendor revision: Nov 12, 2026

Release Notes

Vendor-listed releases

0:6.18.57-1.1.azl4
6.6.161.1-1

CISA KEVNot listedBased on the latest collected catalog

EPSS0.1%Estimated 30-day exploitation probability

Ransomware useNot markedCISA KEV ransomware field

Threat actors0Source-linked actor relationships

Overview

What is CVE-2026-98148?

In the Linux kernel, the following vulnerability has been resolved:

drm/gud: validate GUD_ROTATION_0 is present in supported rotations

The rotation argument to drm_plane_create_rotation_property() is set to DRM_MODE_ROTATE_0, and the device reported rotation bitmask is used as the supported_rotations argument. The driver never validates that GUD_ROTATION_0 is present, so a device that omits it from its GUD_PROPERTY_ROTATION triggers the WARN_ON(rotation & ~supported_rotations) in drm_plane_create_rotation_property()

Fix this by skipping the creation of rotation property if the device doesn't have the GUD_ROTATION_0 bit

Source: NVD