{"id":"CVE-2026-98784","kind":"vulnerability","aliases":["CVE-2026-98784"],"related":[],"title":"Linux kernel: AMD GFX6 driver leaks firmware memory on teardown","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/gfx6: fix firmware leak on teardown\n\nThe firmware requested in gfx_v6_0_init_microcode() is not released\nwhen the GFX block is torn down, leaking the firmware resources.\n\nAdd gfx_v6_0_free_microcode() and call it from gfx_v6_0_sw_fini()\nto release the PFP, ME, CE and RLC firmware.\n\n(cherry picked from commit 386e81346f95ab0be5a82c5535de932e7a456924)","summary":"The AMD amdgpu driver for GFX6 graphics blocks does not release its firmware images when the block is torn down, so memory is leaked on each teardown. The description gives no sign of code execution or data exposure.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd-gpu","infrastructure","linux"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-18T16:17:32+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","triaged_at":"2026-10-25T05:15:20+00:00","updated_at":"2026-10-25T05:15:20+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T05:15:20Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Linux kernel: AMD GFX6 driver leaks firmware memory on teardown","impact":"low","summary":"The AMD amdgpu driver for GFX6 graphics blocks does not release its firmware images when the block is torn down, so memory is leaked on each teardown. The description gives no sign of code execution or data exposure.","category":"infrastructure","nicknames":[],"who_cares":["linux","amd-gpu"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Kernel memory leak on driver teardown; no code execution stated","analyst_note":"","how_to_check":"unknown","needs_analyst":false,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000491,"input_tokens":3409,"output_tokens":301,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-98784':13A,16A '0':82C,102C,111C '386e81346':127C 'add':99C 'amd':3A,18B,23B 'amd-gpu':17B 'amdgpu':24B 'block':29B,38B,91C 'call':106C 'ce':119C 'cherri':123C 'code':55B 'commit':126C 'cve':11A,14A 'data':58B 'descript':50B 'driver':5A,25B 'drm/amdgpu/gfx6':70C 'execut':56B 'exposur':59B 'f95ab0be5a82c5535de932e7a456924':128C 'fini':113C 'firmwar':7A,34B,72C,77C,97C,122C 'fix':71C 'follow':65C 'free':103C 'gfx':80C,90C,100C,109C 'gfx6':4A,27B 'give':51B 'gpu':19B 'graphic':28B 'imag':35B 'infrastructur':20B 'init':83C 'kernel':2A,63C 'leak':6A,45B,73C,95C 'linux':1A,21B,62C 'memori':8A,43B 'microcod':84C,104C 'pfp':117C 'pick':124C 'releas':32B,87C,115C 'request':78C 'resolv':69C 'resourc':98C 'rlc':121C 'sign':53B 'sw':112C 'teardown':10A,48B,75C 'torn':40B,93C 'v6':81C,101C,110C 'vulner':66C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:32+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98784","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98784","severity":null,"published_at":"2026-10-18T16:17:32+00:00","modified_at":"2026-10-21T13:21:46+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}