CVE-2026-52904: drm/nouveau: fix nvkm_device leak on aperture removal failure
In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: fix nvkmdevice leak on aperture removal failure
When apertureremoveconflictingpcidevices() fails during probe, the error path returns directly without unwinding the nvkmdevice that was just allocated by nvkmdevicepcinew(). This leaks both the device wrapper and the pcienabledevice() reference taken inside it.
Jump to the existing failnvkm label so nvkmdevicedel() runs and balances both. The leak was introduced when the intermediate nvkmdevicedel() between detection and aperture removal was dropped in favor of creating the pci device once.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-hwe-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-28.28~24.04.1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 7.0.0-27.27 - Upgrade
Upgrade
ubuntu/linux-awsto a version that resolves this vulnerability.Fixed in 7.0.0-1008.8 - Upgrade
Upgrade
ubuntu/linux-azureto a version that resolves this vulnerability.Fixed in 7.0.0-1010.10 - Upgrade
Upgrade
ubuntu/linux-azure-fdeto a version that resolves this vulnerability.Fixed in 7.0.0-1009.9 - Upgrade
Upgrade
ubuntu/linux-gcpto a version that resolves this vulnerability.Fixed in 7.0.0-1007.7 - Upgrade
Upgrade
ubuntu/linux-ibmto a version that resolves this vulnerability.Fixed in 7.0.0-1009.9 - Upgrade
Upgrade
ubuntu/linux-nvidiato a version that resolves this vulnerability.Fixed in 7.0.0-1013.13 - Upgrade
Upgrade
ubuntu/linux-oem-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-1008.8 - Upgrade
Upgrade
ubuntu/linux-oracleto a version that resolves this vulnerability.Fixed in 7.0.0-1007.7 - Upgrade
Upgrade
ubuntu/linux-raspito a version that resolves this vulnerability.Fixed in 7.0.0-1014.14 - Upgrade
Upgrade
ubuntu/linux-realtimeto a version that resolves this vulnerability.Fixed in 7.0.0-27.27.1 - Upgrade
Upgrade
ubuntu/linux-riscvto a version that resolves this vulnerability.Fixed in 7.0.0-27.27.1 - Compensating control
In the drm/nouveau probe error path, when aperture_remove_conflicting_pci_devices() fails, jump to the existing fail_nvkm label so nvkm_device_del() unwinds the nvkm_device allocated by nvkm_device_pci_new() and balances the pci_enable_device() reference.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-52904?
CVE-2026-52904 has a risk rating of 12.
What does CVE-2026-52904 affect?
CVE-2026-52904 affects the Linux kernel specifically in the drm/nouveau module.
How do I fix CVE-2026-52904?
To fix CVE-2026-52904, update your Linux kernel to the latest version that addresses this vulnerability.
When was CVE-2026-52904 published?
CVE-2026-52904 was published on June 9, 2026.
What issue does CVE-2026-52904 resolve?
CVE-2026-52904 resolves a leak in nvkm_device during aperture removal failure in the Linux kernel.