Linux Kernel EUVD-2026-39884

The affected component is the drm/gma500 Direct Rendering Manager driver in the Linux kernel, specifically the oaktrail_lvds.c LVDS (Low-Voltage Differential Signaling) display initialization path. During init, the driver calls i2c_get_adapter() to borrow a reference to an existing I2C bus adapter for EDID display-data reading, then falls back to allocating and registering its own adapter if EDID reading fails. The error handling flaw conflates these two cases: on a late initialization failure, the cleanup code unconditionally calls i2c_del_adapter() regardless of whether the adapter was externally obtained or internally allocated. Because i2c_get_adapter() only takes an additional reference without transferring ownership, i2c_del_adapter() blocks indefinitely waiting for that extra reference to be released, hanging the kernel. The fix constrains adapter teardown to only those adapters allocated within the LVDS init routine. The CWE field is unspecified but the root cause is a resource lifecycle management error (analogous to CWE-404: Improper Resource Shutdown or Release). CPE data confirms the affected product is cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:*, spanning multiple stable branches from the introduction commit a57ebfc0b4da16a3f36bfebb158198aab3e340f8.