Live › vulnerability › CVE-2026-98513
Go to dashboardIn the Linux nouveau display driver, a failed EDID read in nouveau_connector_detect() returns without releasing the runtime power management reference it took. The GPU stays powered on until a later successful detect, which wastes power and can keep the device from suspending; the sources do not describe any attacker-triggered impact.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Only systems running Linux with the open-source nouveau driver for NVIDIA GPUs are exposed, and the effect is a device that stays powered up rather than a security compromise. Systems using the proprietary NVIDIA driver, or machines without NVIDIA hardware, are not affected.
No product ranges from the sources yet.
uname -r and compare against the fixed kernel versions listed by your distribution for CVE-2026-98513lsmod | grep nouveauEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()
If nvif_outp_edid_get() fails, nouveau_connector_detect() returns early without dropping the runtime PM reference taken at the start of the function, keeping the device powered on until the next successful detect.
Balance the reference on the error path like the other exit paths do.
This page as .md · .json · in your agent: get_signal("CVE-2026-98513")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.