Live › vulnerability › CVE-2026-98514
Go to dashboardIn the Linux kernel's nouveau DRM driver, two error paths in validate_init() break out of the loop without releasing the GEM object reference taken by drm_gem_object_lookup(). The leak means memory for those objects is never freed, which can exhaust resources over time.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: Fix gem reference leak in validate_init()
On the ttm_bo_reserve() failure and "vma not found" error paths, the loop breaks without adding the looked-up object to any validate list, so the reference taken by drm_gem_object_lookup() is never released; validate_fini() only walks the spliced lists. Drop the reference before breaking out on both paths.
This page as .md · .json · in your agent: get_signal("CVE-2026-98514")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.