Live › vulnerability › CVE-2026-98516
Go to dashboardIn the Linux kernel's nouveau GPU driver, a PCI device reference taken while reading memory size is never released, leaking a reference count. The sources describe a reference leak only and do not state an attacker outcome.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel with the nouveau DRM driver loaded for NV1A-family GPUs. The sources do not say which kernel versions are affected or how the leak would be triggered, so the exact population is unknown.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: Fix bridge reference leak in nv1a_ram_new()
pci_get_domain_bus_and_slot() takes a reference to the PCI device, which is never released once the memory size has been read from its config space. Drop the reference before returning.
This page as .md · .json · in your agent: get_signal("CVE-2026-98516")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.