{"id":"CVE-2026-98605","kind":"vulnerability","aliases":["CVE-2026-98605"],"related":[],"title":"Linux kernel: Samsung DSI display driver mishandles TE GPIO lifetime","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach\n\nWhen the Exynos DSI driver was generalized into samsung-dsim, the TE\nGPIO acquisition was switched from gpiod_get_optional() to\ndevm_gpiod_get_optional() while keeping the matching gpiod_put() calls.\nThat combination is wrong for a managed descriptor.\n\nHowever, dropping the puts and keeping the managed get is also wrong:\nsamsung_dsim_register_te_irq() runs from the DSI host attach callback,\nand host detach/reattach can happen without destroying the device that\nowns the managed action. A second attach would then request the GPIO\nagain without having released it.\n\nSwitch back to a non-managed gpiod_get_optional() and keep the explicit\ngpiod_put() on the request_irq() error path and in\nsamsung_dsim_unregister_te_irq().\n\n[Luca: remove unnecessary comment]","summary":"The Samsung DSI display bridge driver in the Linux kernel mixed a managed GPIO acquisition with explicit releases, so repeated host attach and detach could request a GPIO that was not released. The sources do not describe an attacker outcome.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["arm-embedded","drm-display","exynos","infrastructure","linux-kernel"],"not_affected_if":["no-samsung-dsim-hardware"],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-18T16:17:13+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","triaged_at":"2026-10-25T05:21:30+00:00","updated_at":"2026-10-25T05:21:30+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-25T05:21:30Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"Linux kernel: Samsung DSI display driver mishandles TE GPIO lifetime","impact":"low","summary":"The Samsung DSI display bridge driver in the Linux kernel mixed a managed GPIO acquisition with explicit releases, so repeated host attach and detach could request a GPIO that was not released. The sources do not describe an attacker outcome.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","arm-embedded","exynos","drm-display"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unknown; the sources describe a resource lifetime bug only","analyst_note":"Check the NVD entry and the upstream kernel commit for the fixed kernel version and any security impact stated beyond the GPIO lifetime bug.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["no-samsung-dsim-hardware"],"who_is_affected":"Systems running a Linux kernel with the samsung-dsim DRM bridge driver, typically Exynos-based ARM boards with a DSI display. Servers and desktops without that hardware driver are unlikely to be affected. The sources do not state the fixed kernel version.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000594,"input_tokens":3555,"output_tokens":477,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-98605':13A,16A 'acquisit':42B,103C 'action':167C 'also':140C 'arm':18B 'arm-embed':17B 'attach':49B,88C,152C,170C 'attack':66B 'back':182C 'bridg':32B 'call':121C 'callback':153C 'combin':123C 'comment':213C 'could':52B 'cve':11A,14A 'describ':64B 'descriptor':129C 'destroy':160C 'detach':51B 'detach/reattach':156C 'devic':162C 'devm':111C 'display':5A,22B,31B 'driver':6A,33B,93C 'drm':21B 'drm-display':20B 'drm/bridge':78C 'drop':131C 'dsi':4A,30B,92C,150C 'dsim':81C,99C,143C,206C 'embed':19B 'error':201C 'explicit':44B,194C 'exyno':23B,91C 'fix':82C 'follow':73C 'general':95C 'get':108C,113C,138C,189C 'gpio':9A,41B,55B,84C,102C,175C 'gpiod':107C,112C,119C,188C,195C 'happen':158C 'host':48B,87C,151C,155C 'howev':130C 'infrastructur':24B 'irq':146C,200C,209C 'keep':116C,135C,192C 'kernel':2A,27B,37B,71C 'lifetim':10A,85C 'linux':1A,26B,36B,70C 'linux-kernel':25B 'luca':210C 'manag':40B,128C,137C,166C,187C 'match':118C 'mishandl':7A 'mix':38B 'non':186C 'non-manag':185C 'option':109C,114C,190C 'outcom':67B 'own':164C 'path':202C 'put':120C,133C,196C 'regist':144C 'releas':45B,59B,179C 'remov':211C 'repeat':47B 'request':53B,173C,199C 'resolv':77C 'run':147C 'samsung':3A,29B,80C,98C,142C,205C 'samsung-dsim':79C,97C 'second':169C 'sourc':61B 'switch':105C,181C 'te':8A,83C,101C,145C,208C 'unnecessari':212C 'unregist':207C 'vulner':74C 'without':159C,177C 'would':171C 'wrong':125C,141C","nicknames":[],"mitigations":[],"who_affected":"Systems running a Linux kernel with the samsung-dsim DRM bridge driver, typically Exynos-based ARM boards with a DSI display. Servers and desktops without that hardware driver are unlikely to be affected. The sources do not state the fixed kernel version.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:13+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98605","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98605","severity":null,"published_at":"2026-10-18T16:17:13+00:00","modified_at":"2026-10-19T10:19:22+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}