CVE-2026-98179

Received Received - Intake

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix rmmio iounmap skipped on device removal amdgpu_pci_remove() calls drm_dev_unplug() before fini_sw(), so drm_dev_enter() is already false there and the iounmap() guarded by it is skipped. This .remove path runs on both hot-unplug and plain rmmod, so the register BAR ioremap mapping leaks one instance per unload. Unmap rmmio unconditionally (guard only on non-NULL) and drop the now unused idx. (cherry picked from commit dd6f86a97260e5207d3329ad03aa89fdad61b1e6)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-06

EPSS Evaluated

2026-10-18

NVD

CVE-2026-98179

EUVD

EUVD-2026-93107

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	62d5f9f7110ad374db67ab4820f4ff2d916c3cdb
Linux	Linux	62d5f9f7110ad374db67ab4820f4ff2d916c3cdb
Linux	Linux	62d5f9f7110ad374db67ab4820f4ff2d916c3cdb
Linux	Linux	62d5f9f7110ad374db67ab4820f4ff2d916c3cdb
Linux	Linux	5.17

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a memory leak in the AMD GPU driver. When the device is removed or the module is unloaded, the register BAR ioremap mapping is not properly unmapped, causing a leak of one instance per unload. This happens because drm_dev_unplug() is called before fini_sw(), skipping the iounmap() guarded by drm_dev_enter().

Detection Guidance

This vulnerability is specific to the Linux kernel's AMD GPU driver and relates to a memory leak during device removal. Detection requires checking kernel logs for AMD GPU driver errors or memory leaks during driver unloading. Use commands like dmesg | grep amdgpu or journalctl -k | grep amdgpu to inspect kernel logs for related errors.

Impact Analysis

The impact is primarily resource exhaustion. Each time the AMD GPU driver is unloaded or the device is hot-unplugged, a small amount of memory is leaked. Over time, this could lead to system instability or reduced performance due to accumulated memory leaks.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it pertains to a memory leak in the Linux kernel's AMD GPU driver during device removal. No evidence suggests data exposure or security impact that would violate these regulations.

Mitigation Strategies

Apply the latest kernel updates or patches that include the fix for this AMD GPU driver issue. If you are using a vulnerable kernel version, avoid hot-unplugging AMD GPU devices or unloading the amdgpu module until the patch is applied.

Hi! I’m here to help you understand CVE-2026-98179. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70