CVE-2026-98516: drm/nouveau: Fix bridge reference leak in nv1a_ram_new()
Published Oct 18, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: Fix bridge reference leak in nv1aramnew()
pcigetdomainbusandslot() takes a reference to the PCI device, which is never released once the memory size has been read from its config space. Drop the reference before returning.
Affected Software
1 affected component
Linux Linux kernel
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In drm/nouveau's nv1a_ram_new(), release the PCI device reference obtained by pci_get_domain_bus_and_slot() before returning after reading the memory size.
Event History
Oct 18, 2026
CVE Published
via MITRE·03:17 PM
Data Sourced
via MITRE·03:17 PM
Description
Data Sourced
via NVD·04:17 PM
Description