{"id":"CVE-2026-98608","kind":"vulnerability","aliases":["CVE-2026-98608"],"related":[],"title":"Linux kernel: virtio GPU ioctl leaks memory objects on error path","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()\n\nvirtio_gpu_resource_create_ioctl() calls drm_gem_object_release() on the\ndrm_gem_handle_create() error path instead of dropping the reference it\nowns, so obj->funcs->free() never runs and the virtio_gpu_object, its\npages and sg table, the resource id and the host-side resource are\nleaked.\n\nUse drm_gem_object_put() instead.","summary":"A failed handle creation in the virtio GPU resource ioctl releases the object incorrectly, so its memory, pages and host-side resource are never freed. The sources describe a resource leak, not code execution or data exposure.","severity":"low","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","linux-kernel","virtio-gpu","virtual-machines"],"not_affected_if":["no-virtio-gpu"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-18T16:17:13+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","triaged_at":"2026-10-25T05:21:26+00:00","updated_at":"2026-10-25T05:21:26+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-25T05:21:26Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Linux kernel: virtio GPU ioctl leaks memory objects on error path","impact":"low","summary":"A failed handle creation in the virtio GPU resource ioctl releases the object incorrectly, so its memory, pages and host-side resource are never freed. The sources describe a resource leak, not code execution or data exposure.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","virtio-gpu","virtual-machines"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Repeated failed calls leak kernel memory until the host runs low","analyst_note":"Find the upstream kernel commit and the stable releases that carry the fix to fill in how_to_check and fix.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["no-virtio-gpu"],"who_is_affected":"Systems running a Linux kernel with the virtio-gpu DRM driver, such as virtual machines using virtio GPU acceleration. The sources do not say which kernel versions are affected or whether a fixed release exists.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000551,"input_tokens":3390,"output_tokens":424,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-98608':14A,17A 'call':91C 'code':61B 'creat':84C,89C,101C 'creation':31B 'cve':12A,15A 'data':64B 'describ':56B 'drm':92C,98C,139C 'drm/virtio':76C 'drop':106C 'error':10A,102C 'execut':62B 'exposur':65B 'fail':29B 'fix':77C 'follow':71C 'free':114C 'freed':53B 'func':113C 'gem':93C,99C,140C 'gpu':4A,24B,35B,82C,87C,120C 'handl':30B,100C 'host':48B,133C 'host-sid':47B,132C 'id':129C 'incorrect':41B 'infrastructur':18B 'instead':104C,143C 'ioctl':5A,37B,85C,90C 'kernel':2A,21B,69C 'leak':6A,59B,79C,137C 'linux':1A,20B,68C 'linux-kernel':19B 'machin':27B 'memori':7A,44B 'never':52B,115C 'obj':112C 'object':8A,40B,78C,94C,121C,141C 'own':110C 'page':45B,123C 'path':11A,103C 'put':142C 'refer':108C 'releas':38B,95C 'resolv':75C 'resourc':36B,50B,58B,83C,88C,128C,135C 'run':116C 'sg':125C 'side':49B,134C 'sourc':55B 'tabl':126C 'use':138C 'virtio':3A,23B,34B,81C,86C,119C 'virtio-gpu':22B 'virtual':26B 'virtual-machin':25B 'vulner':72C","nicknames":[],"mitigations":[],"who_affected":"Systems running a Linux kernel with the virtio-gpu DRM driver, such as virtual machines using virtio GPU acceleration. The sources do not say which kernel versions are affected or whether a fixed release exists.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:13+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98608","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98608","severity":null,"published_at":"2026-10-18T16:17:13+00:00","modified_at":"2026-10-19T10:19:22+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}