CVE-2026-98516
What it is
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix bridge reference leak in nv1a_ram_new() pci_get_domain_bus_and_slot() takes a reference to the PCI device, which is never released once the memory size has been read from its config space. Drop the reference before returning.
At a glance
- Exploit odds
- 0.2% chance of exploitation in the next 30 days (EPSS).
- Fix
- No patch or advisory is linked yet. Look at mitigations or restrict exposure.
Timeline
- PublishedDisclosed publicly on CVE.org and NVD
- Last updatedMost recent change to the record
Details
- Published
- Last modified
- Exploit probability
- 0.2% · EPSS, next 30 days
- Record status
- Received
References
- https://git.kernel.org/stable/c/2bda86f1fb2373a2ad8900341d5d6a6d68ce6ddb
- https://git.kernel.org/stable/c/3e0861ebb9ecf0b726ea42123bd579362ec1f977
- https://git.kernel.org/stable/c/553c86816e99855d6784eebd2588d5d2198c280e
- https://git.kernel.org/stable/c/67b4411538c8341692548429d43256f25be99f7a
- https://git.kernel.org/stable/c/6d497216c10af3dc9747b399295f385fabbac9e5
- https://git.kernel.org/stable/c/9ffb43369ae51af5d5646b1ef680ab1af0fb4ad9
- https://git.kernel.org/stable/c/ac4f1d28498b9798fc20f91f23a4256032186370
- https://git.kernel.org/stable/c/add5e0a45e3971df9c65cc7b59c90559a25dc5a9