CVE-2026-98513
Received
Received - Intake
Runtime PM Leak in Nouveau Linux Kernel Driver
Vulnerability report for CVE-2026-98513, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-18
Last updated on: 2026-10-18
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()
If nvif_outp_edid_get() fails, nouveau_connector_detect() returns
early without dropping the runtime PM reference taken at the start
of the function, keeping the device powered on until the next
successful detect.
Balance the reference on the error path like the other exit paths
do.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | 0cd7e07181390085742bf623d6af3eef215c0503 |
| Linux | Linux | 0cd7e07181390085742bf623d6af3eef215c0503 |
| Linux | Linux | 0cd7e07181390085742bf623d6af3eef215c0503 |
| Linux | Linux | 0cd7e07181390085742bf623d6af3eef215c0503 |
| Linux | Linux | 6.7 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |