CVE-2026-98516
Published: October 20, 2026Last modified: October 20, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix bridge reference leak in nv1a_ram_new() pci_get_domain_bus_and_slot() takes a reference to the PCI device, which is never released once the memory size has been read from its config space. Drop the reference before returning.
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | linux-lts | Fixed (6.1.189-r0) |
| 25 LTS | linux-lts | Fixed (6.12.112-r0) | |
| Stream | linux-lts | Fixed (6.18.55-r0) |
References
- https://git.kernel.org/stable/c/2bda86f1fb2373a2ad8900341d5d6a6d68ce6ddb
- https://git.kernel.org/stable/c/3e0861ebb9ecf0b726ea42123bd579362ec1f977
- https://git.kernel.org/stable/c/553c86816e99855d6784eebd2588d5d2198c280e
- https://git.kernel.org/stable/c/67b4411538c8341692548429d43256f25be99f7a
- https://git.kernel.org/stable/c/6d497216c10af3dc9747b399295f385fabbac9e5
- https://git.kernel.org/stable/c/9ffb43369ae51af5d5646b1ef680ab1af0fb4ad9
- https://git.kernel.org/stable/c/ac4f1d28498b9798fc20f91f23a4256032186370
- https://git.kernel.org/stable/c/add5e0a45e3971df9c65cc7b59c90559a25dc5a9