CVE-2026-98606
Received Received - Intake

Memory Leak in Linux Kernel's DRM VirtIO GPU Driver

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: release the GEM object on virtio_gpu_vram_create() errors virtio_gpu_vram_create() frees the object with a bare kfree(vram) on both error paths after drm_gem_private_object_init() has run, and on the second one after drm_gem_create_mmap_offset() has linked obj->vma_node into the device's VMA offset manager. The freed object stays in that interval tree, so a later lookup or insertion walks freed memory, and the dma_resv and gpuva lock are never destroyed. Call drm_gem_object_release() before kfree() on both paths.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98606
EUVD
EUVD-2026-103651

Affected Vendors & Products

Showing 8 associated CPEs
Vendor Product Version / Range
Linux Linux 16845c5d540929d2f4dc845f11fbbb238e69170a
Linux Linux 16845c5d540929d2f4dc845f11fbbb238e69170a
Linux Linux 16845c5d540929d2f4dc845f11fbbb238e69170a
Linux Linux 16845c5d540929d2f4dc845f11fbbb238e69170a
Linux Linux 16845c5d540929d2f4dc845f11fbbb238e69170a
Linux Linux 16845c5d540929d2f4dc845f11fbbb238e69170a
Linux Linux 16845c5d540929d2f4dc845f11fbbb238e69170a
Linux Linux 5.11

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability where the function virtio_gpu_vram_create() fails to properly release a graphics memory object when errors occur. Instead of using the correct cleanup function drm_gem_object_release(), it uses kfree() directly, leaving the object in an inconsistent state. This causes the freed memory to remain linked in the device's VMA offset manager, leading to potential memory corruption when other operations try to access it.

Detection Guidance

This vulnerability is specific to the Linux kernel's drm/virtio driver and requires kernel-level inspection. Detection involves checking for kernel logs or errors related to virtio_gpu_vram_create() failures or memory corruption in the DRM subsystem. Use commands like dmesg | grep virtio or journalctl -k | grep virtio to inspect kernel logs for errors.

Impact Analysis

This vulnerability could lead to system instability, crashes, or potential privilege escalation if exploited. Since it involves memory corruption in the graphics subsystem, it might cause graphical glitches, application failures, or even kernel panics. Systems using affected Linux kernel versions with VirtIO GPU drivers are at risk.

Mitigation Strategies

Apply the latest kernel update provided by your Linux distribution to patch the vulnerability. If immediate patching is not possible, consider disabling the virtio GPU driver if not in use, or restrict access to untrusted users to reduce exposure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98606. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart