CVE-2026-98514drm/nouveau: Fix gem reference leak in validate_init()
- —Not scoredno CVSS score yet
- 0.22%Exploitation in 30 daysEPSS · top 88% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix gem reference leak in validate_init() On the ttm_bo_reserve() failure and "vma not found" error paths, the loop breaks without adding the looked-up object to any validate list, so the reference taken by drm_gem_object_lookup() is never released; validate_fini() only walks the spliced lists. Drop the reference before breaking out on both paths.
Timeline
ID reserved
By Linux
- 23 days later
· 23 days later
Published
- 1 day later
· 1 day later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Received.
- EPSS (exploitation in 30 days)
- 0.22% · top 88% of all CVEs (13 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected 19ca10d82e33bcfe92412c461fc3534ec1e14747 – < af2f48c12365866abb327d75c21a13bbde84719c
- affected 19ca10d82e33bcfe92412c461fc3534ec1e14747 – < 3c80e069470cf73c357c9edb5ec5fba20e6f6a98
- affected 19ca10d82e33bcfe92412c461fc3534ec1e14747 – < 957619120c26d6727efd18504e6b488673d3900a
- affected 19ca10d82e33bcfe92412c461fc3534ec1e14747 – < 74485cdc343060fce08f8f3990da524d783e43a7
- affected 19ca10d82e33bcfe92412c461fc3534ec1e14747 – < 8281930fc194ad448aaa5de8dd47fb6fb1cba327
- affected 19ca10d82e33bcfe92412c461fc3534ec1e14747 – < 030e93fc91d55d9487b3b85fc0712bb795d77834
- affected 19ca10d82e33bcfe92412c461fc3534ec1e14747 – < 9e13c398a23445baf38f0a59033dd9872a2bfe20
- affected 19ca10d82e33bcfe92412c461fc3534ec1e14747 – < 5ea72f7b7139b123713a7983448f910bc4514d9e
- affected bcc16811023394a5e61a20c107f1fa560a28b7c1
- affected 4.17.12 – < 4.18
- affected 4.18
- unaffected < 4.18
- unaffected 5.10.271 – ≤ 5.10.*
- unaffected 5.15.222 – ≤ 5.15.*
- unaffected 6.1.189 – ≤ 6.1.*
- unaffected 6.6.158 – ≤ 6.6.*
- unaffected 6.12.112 – ≤ 6.12.*
- unaffected 6.18.55 – ≤ 6.18.*
- unaffected 7.2.9 – ≤ 7.2.*
- unaffected 7.3 – ≤ *
References
References8
- https://git.kernel.org/stable/c/af2f48c12365866abb327d75c21a13bbde84719c (opens in a new tab)
- https://git.kernel.org/stable/c/3c80e069470cf73c357c9edb5ec5fba20e6f6a98 (opens in a new tab)
- https://git.kernel.org/stable/c/957619120c26d6727efd18504e6b488673d3900a (opens in a new tab)
- https://git.kernel.org/stable/c/74485cdc343060fce08f8f3990da524d783e43a7 (opens in a new tab)
- https://git.kernel.org/stable/c/8281930fc194ad448aaa5de8dd47fb6fb1cba327 (opens in a new tab)
- https://git.kernel.org/stable/c/030e93fc91d55d9487b3b85fc0712bb795d77834 (opens in a new tab)
- https://git.kernel.org/stable/c/9e13c398a23445baf38f0a59033dd9872a2bfe20 (opens in a new tab)
- https://git.kernel.org/stable/c/5ea72f7b7139b123713a7983448f910bc4514d9e (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-103754 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-98514)Record last updated .