{"id":"CVE-2026-98875","kind":"vulnerability","aliases":["CVE-2026-98875"],"related":[],"title":"Linux kernel nouveau driver: missing SEC2 entry crashes GA100 GSP boot","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau/gsp: add SEC2 to GA100 chip table\n\nThe booter-load and booter-unload firmware run on the SEC2 falcon.\nDuring tu102_gsp_oneinit(), the booter constructor needs device->sec2\nto access the SEC2 falcon.\n\nWithout the .sec2 entry, device->sec2 is NULL and this dereference\ncrashes during GSP-RM boot.","summary":"The Linux kernel's nouveau DRM driver lacks a SEC2 falcon entry in its GA100 chip table, so device->sec2 stays NULL. Booting GSP-RM then dereferences that NULL pointer and crashes.","severity":"unknown","cvss":null,"epss":0.00206,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ga100","infrastructure","linux-kernel","nouveau","nvidia-gpu"],"not_affected_if":["nvidia-proprietary-driver"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-23T12:18:20+00:00","first_seen_at":"2026-10-23T21:57:33+00:00","triaged_at":"2026-10-25T05:00:15+00:00","updated_at":"2026-10-25T12:38:51+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T05:00:15Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Linux kernel nouveau driver: missing SEC2 entry crashes GA100 GSP boot","impact":"low","summary":"The Linux kernel's nouveau DRM driver lacks a SEC2 falcon entry in its GA100 chip table, so device->sec2 stays NULL. Booting GSP-RM then dereferences that NULL pointer and crashes.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","nouveau","nvidia-gpu","ga100"],"confidence":0.5,"needs_auth":"unknown","worst_case":"kernel NULL dereference crashes the machine during GPU boot","analyst_note":"Check the NVD and kernel.org stable commit for the affected kernel version range and whether the crash is only a denial of service.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["nvidia-proprietary-driver"],"who_is_affected":"Systems running the Linux kernel nouveau driver on NVIDIA GA100-class GPUs with GSP firmware boot; the sources describe a crash during GSP-RM boot and do not describe a data path an attacker can reach. unknown whether machines on other chips are affected.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000575,"input_tokens":3380,"output_tokens":474,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-98875':14A,17A 'access':102C 'add':71C 'boot':11A,49B,122C 'booter':79C,83C,96C 'booter-load':78C 'booter-unload':82C 'chip':42B,75C 'constructor':97C 'crash':8A,59B,117C 'cve':12A,15A 'derefer':54B,116C 'devic':45B,99C,110C 'driver':4A,33B 'drm':32B 'drm/nouveau/gsp':70C 'entri':7A,38B,109C 'falcon':37B,90C,105C 'firmwar':85C 'follow':65C 'ga100':9A,18B,41B,74C 'gpu':26B 'gsp':10A,51B,93C,120C 'gsp-rm':50B,119C 'infrastructur':19B 'kernel':2A,22B,29B,63C 'lack':34B 'linux':1A,21B,28B,62C 'linux-kernel':20B 'load':80C 'miss':5A 'need':98C 'nouveau':3A,23B,31B 'null':48B,56B,113C 'nvidia':25B 'nvidia-gpu':24B 'oneinit':94C 'pointer':57B 'resolv':69C 'rm':52B,121C 'run':86C 'sec2':6A,36B,46B,72C,89C,100C,104C,108C,111C 'stay':47B 'tabl':43B,76C 'tu102':92C 'unload':84C 'vulner':66C 'without':106C","nicknames":[],"mitigations":[],"who_affected":"Systems running the Linux kernel nouveau driver on NVIDIA GA100-class GPUs with GSP firmware boot; the sources describe a crash during GSP-RM boot and do not describe a data path an attacker can reach. unknown whether machines on other chips are affected.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-23T12:18:20+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98875","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98875","severity":null,"published_at":"2026-10-23T12:18:20+00:00","modified_at":"2026-10-23T12:18:20+00:00","first_seen_at":"2026-10-23T21:57:33+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"epss","external_id":"CVE-2026-98875","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-98875","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-25T12:38:51+00:00","fetched_at":"2026-10-25T12:38:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}