CVE-2026-98784

Received Received - Intake

AMDGPU GFX6 Firmware Leak on Teardown

Publication date: 2026-10-18

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx6: fix firmware leak on teardown The firmware requested in gfx_v6_0_init_microcode() is not released when the GFX block is torn down, leaking the firmware resources. Add gfx_v6_0_free_microcode() and call it from gfx_v6_0_sw_fini() to release the PFP, ME, CE and RLC firmware. (cherry picked from commit 386e81346f95ab0be5a82c5535de932e7a456924)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-18

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-18

EPSS Evaluated

N/A

NVD

CVE-2026-98784

EUVD

EUVD-2026-103869

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Linux	Linux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Linux	Linux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Linux	Linux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Linux	Linux	0
Linux	Linux	0
Linux	Linux	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a firmware leak in the AMD GPU graphics driver. When the GFX block is torn down, the firmware loaded during initialization is not released, causing a resource leak. The fix adds a function to properly free the firmware and calls it during cleanup.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMD GPU driver and may not have direct network detection methods. Check kernel logs for AMD GPU-related errors or firmware loading issues using commands like dmesg | grep amdgpu or journalctl -k | grep amdgpu.

Impact Analysis

This vulnerability may lead to unnecessary memory usage and potential system instability over time due to unreleased firmware resources. It could cause performance degradation or crashes in systems using affected AMD GPUs.

Compliance Impact

This vulnerability involves a firmware leak in the Linux kernel's AMD GPU driver, which does not release firmware resources during teardown. It does not directly impact data privacy or security controls typically addressed by GDPR or HIPAA. Compliance with these standards is unlikely to be affected as the issue is resource management-related rather than data handling or protection.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this issue. Monitor kernel updates from your distribution and apply them promptly. No additional configuration changes are required beyond the kernel update.

Hi! I’m here to help you understand CVE-2026-98784. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70