{"id":"CVE-2026-98514","kind":"vulnerability","aliases":["CVE-2026-98514"],"related":[],"title":"Linux kernel: nouveau GPU driver leaks GEM object references on errors","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: Fix gem reference leak in validate_init()\n\nOn the ttm_bo_reserve() failure and \"vma not found\" error paths, the\nloop breaks without adding the looked-up object to any validate list,\nso the reference taken by drm_gem_object_lookup() is never released;\nvalidate_fini() only walks the spliced lists.  Drop the reference\nbefore breaking out on both paths.","summary":"In the Linux kernel's nouveau DRM driver, two error paths in validate_init() break out of the loop without releasing the GEM object reference taken by drm_gem_object_lookup(). The leak means memory for those objects is never freed, which can exhaust resources over time.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","kernel","linux","nouveau","nvidia-gpu"],"not_affected_if":["no-nvidia-gpu","nouveau-driver-not-loaded"],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-18T16:17:02+00:00","first_seen_at":"2026-10-23T21:57:15+00:00","triaged_at":"2026-10-25T05:25:18+00:00","updated_at":"2026-10-25T05:25:18+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T05:25:18Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"Linux kernel: nouveau GPU driver leaks GEM object references on errors","impact":"low","summary":"In the Linux kernel's nouveau DRM driver, two error paths in validate_init() break out of the loop without releasing the GEM object reference taken by drm_gem_object_lookup(). The leak means memory for those objects is never freed, which can exhaust resources over time.","category":"infrastructure","nicknames":[],"who_cares":["linux","kernel","nouveau","nvidia-gpu"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Memory leak in kernel GPU driver; possible resource exhaustion","analyst_note":"Find the fixed kernel stable versions and the commit for this nouveau validate_init() fix at the NVD entry or kernel.org stable mailing list.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["no-nvidia-gpu","nouveau-driver-not-loaded"],"who_is_affected":"unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.00054,"input_tokens":3367,"output_tokens":407,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-98514':14A,17A 'add':106C 'bo':93C 'break':39B,104C,139C 'cve':12A,15A 'driver':5A,32B 'drm':31B,52B,121C 'drm/nouveau':82C 'drop':135C 'error':11A,34B,100C 'exhaust':68B 'failur':95C 'fini':129C 'fix':83C 'follow':77C 'found':99C 'freed':65B 'gem':7A,47B,53B,84C,122C 'gpu':4A,24B 'infrastructur':18B 'init':38B,89C 'kernel':2A,19B,28B,75C 'leak':6A,57B,86C 'linux':1A,20B,27B,74C 'list':115C,134C 'look':109C 'looked-up':108C 'lookup':55B,124C 'loop':43B,103C 'mean':58B 'memori':59B 'never':64B,126C 'nouveau':3A,21B,30B 'nvidia':23B 'nvidia-gpu':22B 'object':8A,48B,54B,62B,111C,123C 'path':35B,101C,143C 'refer':9A,49B,85C,118C,137C 'releas':45B,127C 'reserv':94C 'resolv':81C 'resourc':69B 'splice':133C 'taken':50B,119C 'time':71B 'ttm':92C 'two':33B 'valid':37B,88C,114C,128C 'vma':97C 'vulner':78C 'walk':131C 'without':44B,105C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:02+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98514","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98514","severity":null,"published_at":"2026-10-18T16:17:02+00:00","modified_at":"2026-10-19T10:19:05+00:00","first_seen_at":"2026-10-23T21:57:15+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}