{"id":"CVE-2026-98516","kind":"vulnerability","aliases":["CVE-2026-98516"],"related":[],"title":"Linux kernel: nouveau driver leaks a PCI device reference","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: Fix bridge reference leak in nv1a_ram_new()\n\npci_get_domain_bus_and_slot() takes a reference to the PCI device,\nwhich is never released once the memory size has been read from its\nconfig space.  Drop the reference before returning.","summary":"In the Linux kernel's nouveau GPU driver, a PCI device reference taken while reading memory size is never released, leaking a reference count. The sources describe a reference leak only and do not state an attacker outcome.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","linux-kernel","nouveau","self-hosted"],"not_affected_if":["no-nouveau-driver"],"how_to_check":"- unknown","fix":"- Update the Linux kernel to a release that includes the upstream fix for drm/nouveau nv1a_ram_new(); the fixed version is unknown from the sources.","status":"open","published_at":"2026-10-18T16:17:02+00:00","first_seen_at":"2026-10-23T21:57:15+00:00","triaged_at":"2026-10-25T05:25:17+00:00","updated_at":"2026-10-25T05:25:17+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T05:25:17Z","model":"claude-haiku-5-5","output":{"fix":"- Update the Linux kernel to a release that includes the upstream fix for drm/nouveau nv1a_ram_new(); the fixed version is unknown from the sources.","reach":"local","title":"Linux kernel: nouveau driver leaks a PCI device reference","impact":"low","summary":"In the Linux kernel's nouveau GPU driver, a PCI device reference taken while reading memory size is never released, leaking a reference count. The sources describe a reference leak only and do not state an attacker outcome.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","nouveau","self-hosted"],"confidence":0.5,"needs_auth":"unknown","worst_case":"unknown; the sources describe only a reference leak","analyst_note":"Check the kernel.org commit or the NVD entry for affected version ranges, fixed stable versions, and any stated impact beyond the reference leak.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["no-nouveau-driver"],"who_is_affected":"Systems running a Linux kernel with the nouveau DRM driver loaded for NV1A-family GPUs. The sources do not say which kernel versions are affected or how the leak would be triggered, so the exact population is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000571,"input_tokens":3325,"output_tokens":478,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':11A,14A '-98516':12A,15A 'attack':60B 'bridg':74C 'bus':84C 'config':107C 'count':47B 'cve':10A,13A 'describ':50B 'devic':8A,34B,93C 'domain':83C 'driver':4A,31B 'drm/nouveau':72C 'drop':109C 'fix':73C 'follow':67C 'get':82C 'gpu':30B 'host':23B 'infrastructur':16B 'kernel':2A,19B,27B,65C 'leak':5A,44B,53B,76C 'linux':1A,18B,26B,64C 'linux-kernel':17B 'memori':39B,100C 'never':42B,96C 'new':80C 'nouveau':3A,20B,29B 'nv1a':78C 'outcom':61B 'pci':7A,33B,81C,92C 'ram':79C 'read':38B,104C 'refer':9A,35B,46B,52B,75C,89C,111C 'releas':43B,97C 'resolv':71C 'return':113C 'self':22B 'self-host':21B 'size':40B,101C 'slot':86C 'sourc':49B 'space':108C 'state':58B 'take':87C 'taken':36B 'vulner':68C","nicknames":[],"mitigations":[],"who_affected":"Systems running a Linux kernel with the nouveau DRM driver loaded for NV1A-family GPUs. The sources do not say which kernel versions are affected or how the leak would be triggered, so the exact population is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:02+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98516","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98516","severity":null,"published_at":"2026-10-18T16:17:02+00:00","modified_at":"2026-10-19T10:19:05+00:00","first_seen_at":"2026-10-23T21:57:15+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}