---
id: "CVE-2026-98513"
kind: "vulnerability"
aliases: ["CVE-2026-98513"]
title: "Linux kernel nouveau driver leaks GPU power reference on EDID failure"
severity: "low"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "kernel", "linux", "nouveau", "nvidia-gpu"]
not_affected_if: ["no-nvidia-gpu", "proprietary-nvidia-driver"]
published_at: "2026-10-18T16:17:02+00:00"
first_seen_at: "2026-10-23T21:57:15+00:00"
updated_at: "2026-10-25T05:25:21+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98513", "first_seen_at": "2026-10-23T21:57:15+00:00"}]
---

# Linux kernel nouveau driver leaks GPU power reference on EDID failure

In the Linux nouveau display driver, a failed EDID read in nouveau_connector_detect() returns without releasing the runtime power management reference it took. The GPU stays powered on until a later successful detect, which wastes power and can keep the device from suspending; the sources do not describe any attacker-triggered impact.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `uname -r` and compare against the fixed kernel versions listed by your distribution for CVE-2026-98513
- Check whether the nouveau driver is loaded with `lsmod | grep nouveau`

## Fix

- Install the kernel build from your distribution that includes the upstream fix for CVE-2026-98513 and reboot
- unknown for exact fixed kernel versions; the sources do not list them

## Timeline

- 2026-10-23T21:57:15+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-98513

## From the sources

In the Linux kernel, the following vulnerability has been resolved:

drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()

If nvif_outp_edid_get() fails, nouveau_connector_detect() returns
early without dropping the runtime PM reference taken at the start
of the function, keeping the device powered on until the next
successful detect.

Balance the reference on the error path like the other exit paths
do.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_