What’s Vulnerable › Vulnerabilities

CVE-2026-98516: drm/nouveau: Fix bridge reference leak in nv1a_ram_new()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-18 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix bridge reference leak in nv1a_ram_new() pci_get_domain_bus_and_slot() takes a reference to the PCI device, which is never released once the memory size has been read from its config space. Drop the reference before returning.

Affected products

• Linux kernel: 4.16 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2bda86f1fb2373a2ad8900341d5d6a6d68ce6ddb
• https://git.kernel.org/stable/c/3e0861ebb9ecf0b726ea42123bd579362ec1f977
• https://git.kernel.org/stable/c/553c86816e99855d6784eebd2588d5d2198c280e
• https://git.kernel.org/stable/c/67b4411538c8341692548429d43256f25be99f7a
• https://git.kernel.org/stable/c/6d497216c10af3dc9747b399295f385fabbac9e5
• https://git.kernel.org/stable/c/9ffb43369ae51af5d5646b1ef680ab1af0fb4ad9
• https://git.kernel.org/stable/c/ac4f1d28498b9798fc20f91f23a4256032186370
• https://git.kernel.org/stable/c/add5e0a45e3971df9c65cc7b59c90559a25dc5a9

Get alerted when CVE-2026-98516 or the next vulnerability affects your stack