CVE-2026-98516

drm/nouveau: Fix bridge reference leak in nv1a_ram_new()

State: Published
Severity: Not scored
Published: Oct 18, 2026
Updated: Oct 19, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/nouveau: Fix bridge reference leak in nv1a_ram_new()

pci_get_domain_bus_and_slot() takes a reference to the PCI device, which is never released once the memory size has been read from its config space. Drop the reference before returning.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2fa6d6cdaf283c05ae23842b2a04aeb223203c13 to before add5e0a45e3971df9c65cc7b59c90559a25dc5a9Affected 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 to before 2bda86f1fb2373a2ad8900341d5d6a6d68ce6ddbAffected 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 to before 9ffb43369ae51af5d5646b1ef680ab1af0fb4ad9Affected 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 to before ac4f1d28498b9798fc20f91f23a4256032186370Affected 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 to before 553c86816e99855d6784eebd2588d5d2198c280eAffected 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 to before 6d497216c10af3dc9747b399295f385fabbac9e5Affected 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 to before 3e0861ebb9ecf0b726ea42123bd579362ec1f977Affected 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 to before 67b4411538c8341692548429d43256f25be99f7aAffected
LinuxLinux	4.16Affected before 4.16Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.112 through 6.12.Not affected 6.18.55 through 6.18.Not affected 7.2.9 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

2fa6d6cdaf283c05ae23842b2a04aeb223203c13 to before add5e0a45e3971df9c65cc7b59c90559a25dc5a9Affected
2fa6d6cdaf283c05ae23842b2a04aeb223203c13 to before 2bda86f1fb2373a2ad8900341d5d6a6d68ce6ddbAffected
2fa6d6cdaf283c05ae23842b2a04aeb223203c13 to before 9ffb43369ae51af5d5646b1ef680ab1af0fb4ad9Affected
2fa6d6cdaf283c05ae23842b2a04aeb223203c13 to before ac4f1d28498b9798fc20f91f23a4256032186370Affected
2fa6d6cdaf283c05ae23842b2a04aeb223203c13 to before 553c86816e99855d6784eebd2588d5d2198c280eAffected
2fa6d6cdaf283c05ae23842b2a04aeb223203c13 to before 6d497216c10af3dc9747b399295f385fabbac9e5Affected
2fa6d6cdaf283c05ae23842b2a04aeb223203c13 to before 3e0861ebb9ecf0b726ea42123bd579362ec1f977Affected
2fa6d6cdaf283c05ae23842b2a04aeb223203c13 to before 67b4411538c8341692548429d43256f25be99f7aAffected

LinuxLinux

4.16Affected
before 4.16Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.112 through 6.12.*Not affected
6.18.55 through 6.18.*Not affected
7.2.9 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.