{"id":"CVE-2026-98518","kind":"vulnerability","aliases":["CVE-2026-98518"],"related":[],"title":"Linux kernel: Nouveau GPU memory migration can address VRAM outside its buffer","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau/dmem: pin VRAM for the whole registered range\n\nCommit c32287471077 (\"gpu/drm/nouveau: enable THP support for GPU memory\nmigration\") grew the device-private region that\nnouveau_dmem_chunk_alloc() registers from DMEM_CHUNK_SIZE to\nDMEM_CHUNK_SIZE * NR_CHUNKS, but left the VRAM buffer object backing that\nregion at DMEM_CHUNK_SIZE.\n\nnouveau_dmem_page_addr() returns chunk->bo->offset plus the page's offset\nwithin the registered region, so every page past the first chunk resolves\nto VRAM outside the buffer object.\n\nSize the buffer object to the region it backs.","summary":"The Nouveau DRM driver registers a device-private memory region larger than the VRAM buffer object that backs it, so pages beyond the first chunk resolve to VRAM outside that buffer. The sources do not state the resulting attacker capability, so the exact impact is unknown.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["linux-kernel","nouveau","nvidia-gpu","runtime","workstations"],"not_affected_if":["no-nouveau-loaded","proprietary-nvidia-driver"],"how_to_check":"- Check the kernel version with `uname -r` and whether the `nouveau` module is loaded with `lsmod | grep nouveau`\n- Confirm the patch is present by looking for the commit that sizes the buffer object to the registered region in the kernel source tree (sources do not give a commit id)","fix":"- Update the Linux kernel to a release that includes the upstream fix for drm/nouveau/dmem (version unknown from sources)","status":"open","published_at":"2026-10-18T16:17:03+00:00","first_seen_at":"2026-10-23T21:57:15+00:00","triaged_at":"2026-10-25T05:25:15+00:00","updated_at":"2026-10-25T05:25:15+00:00","category":"runtime","confidence":0.4,"triage":{"at":"2026-10-25T05:25:15Z","model":"claude-haiku-5-5","output":{"fix":"- Update the Linux kernel to a release that includes the upstream fix for drm/nouveau/dmem (version unknown from sources)","reach":"local","title":"Linux kernel: Nouveau GPU memory migration can address VRAM outside its buffer","impact":"medium","summary":"The Nouveau DRM driver registers a device-private memory region larger than the VRAM buffer object that backs it, so pages beyond the first chunk resolve to VRAM outside that buffer. The sources do not state the resulting attacker capability, so the exact impact is unknown.","category":"runtime","nicknames":[],"who_cares":["linux-kernel","nvidia-gpu","nouveau","workstations"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unknown; sources do not say what an attacker can read or write","analyst_note":"Find the upstream kernel commit and fixed stable versions, and confirm the attacker capability and whether unprivileged local users can trigger it.","how_to_check":"- Check the kernel version with `uname -r` and whether the `nouveau` module is loaded with `lsmod | grep nouveau`\n- Confirm the patch is present by looking for the commit that sizes the buffer object to the registered region in the kernel source tree (sources do not give a commit id)","needs_analyst":true,"not_affected_if":["proprietary-nvidia-driver","no-nouveau-loaded"],"who_is_affected":"Systems running a Linux kernel with the Nouveau driver and device-private memory migration (THP support for GPU memory migration) enabled, typically machines with NVIDIA GPUs using the open-source Nouveau driver rather than the proprietary driver. Systems without Nouveau loaded or without NVIDIA GPUs using it are likely not affected, but the sources do not confirm this.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000681,"input_tokens":3490,"output_tokens":664,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-98518':15A,18A 'addr':141C 'address':8A 'alloc':113C 'attack':67B 'back':46B,131C,177C 'beyond':50B 'bo':144C 'buffer':12A,43B,59B,129C,167C,171C 'c32287471077':94C 'capabl':68B 'chunk':53B,112C,117C,121C,124C,136C,143C,161C 'commit':93C 'cve':13A,16A 'devic':35B,106C 'device-priv':34B,105C 'dmem':111C,116C,120C,135C,139C 'driver':31B 'drm':30B 'drm/nouveau/dmem':85C 'enabl':96C 'everi':156C 'exact':71B 'first':52B,160C 'follow':80C 'gpu':4A,25B,100C 'gpu/drm/nouveau':95C 'grew':103C 'impact':72B 'kernel':2A,21B,78C 'larger':39B 'left':126C 'linux':1A,20B,77C 'linux-kernel':19B 'memori':5A,37B,101C 'migrat':6A,102C 'nouveau':3A,22B,29B,110C,138C 'nr':123C 'nvidia':24B 'nvidia-gpu':23B 'object':44B,130C,168C,172C 'offset':145C,150C 'outsid':10A,57B,165C 'page':49B,140C,148C,157C 'past':158C 'pin':86C 'plus':146C 'privat':36B,107C 'rang':92C 'region':38B,108C,133C,154C,175C 'regist':32B,91C,114C,153C 'resolv':54B,84C,162C 'result':66B 'return':142C 'runtim':26B 'size':118C,122C,137C,169C 'sourc':61B 'state':64B 'support':98C 'thp':97C 'unknown':74B 'vram':9A,42B,56B,87C,128C,164C 'vulner':81C 'whole':90C 'within':151C 'workstat':27B","nicknames":[],"mitigations":[],"who_affected":"Systems running a Linux kernel with the Nouveau driver and device-private memory migration (THP support for GPU memory migration) enabled, typically machines with NVIDIA GPUs using the open-source Nouveau driver rather than the proprietary driver. Systems without Nouveau loaded or without NVIDIA GPUs using it are likely not affected, but the sources do not confirm this.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:03+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98518","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98518","severity":null,"published_at":"2026-10-18T16:17:03+00:00","modified_at":"2026-10-19T10:19:05+00:00","first_seen_at":"2026-10-23T21:57:15+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}