CVE-2026-98779

drm/amdgpu: fix ACP MFD device leak on init failure

State: Published
Severity: Not scored
Published: Oct 18, 2026
Updated: Oct 30, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: fix ACP MFD device leak on init failure

acp_hw_init() registers ACP child devices with mfd_add_devices() before attaching them to the ACP power domain and initializing the hardware.

If attaching a child to the power domain fails, or if the ACP reset or clock enable operation times out, the failure path frees only the source cell, resource, and platform-data allocations. The child platform devices already registered by mfd_add_devices() remain registered and are never released.

Remove the children from the power domain and unregister the MFD devices on failures that occur after mfd_add_devices() succeeds. Keep mfd_add_devices() failures on the existing cleanup path since the MFD core already rolls back partially registered children itself.

The issue was identified by a static analysis tool I developed and confirmed by manual review.

(cherry picked from commit 63da68d6a2279ec945581c990c5a59a5ae8b5560)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	25030321ba2860c56651429a4f28d94a6483d952 to before 385ad314f1c096aae71fff516214bb312a6047fbAffected 25030321ba2860c56651429a4f28d94a6483d952 to before 7b7f770f48be77ce38e93216983dcdf1ea3a42baAffected 25030321ba2860c56651429a4f28d94a6483d952 to before 65ef6645982ccde16a7bc98d025eb80f5fab47f6Affected 25030321ba2860c56651429a4f28d94a6483d952 to before d700c26ed64bd3c26e4aa7679b9d5f3333c3747aAffected 25030321ba2860c56651429a4f28d94a6483d952 to before 2b9a53940a2bc063ea4cd09ee49220a503a0170cAffected 25030321ba2860c56651429a4f28d94a6483d952 to before 587469076e4ffb617f7ad1a0c4a13072a3e87113Affected 25030321ba2860c56651429a4f28d94a6483d952 to before abf854513bc19e6e24d45353ac99ec5627ee0accAffected 25030321ba2860c56651429a4f28d94a6483d952 to before f0013046151b7467e62c471c1c83d63ea255799cAffected
LinuxLinux	4.6Affected before 4.6Not affected 5.10.273 through 5.10.Not affected 5.15.224 through 5.15.Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.113 through 6.12.Not affected 6.18.56 through 6.18.Not affected 7.2.10 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

25030321ba2860c56651429a4f28d94a6483d952 to before 385ad314f1c096aae71fff516214bb312a6047fbAffected
25030321ba2860c56651429a4f28d94a6483d952 to before 7b7f770f48be77ce38e93216983dcdf1ea3a42baAffected
25030321ba2860c56651429a4f28d94a6483d952 to before 65ef6645982ccde16a7bc98d025eb80f5fab47f6Affected
25030321ba2860c56651429a4f28d94a6483d952 to before d700c26ed64bd3c26e4aa7679b9d5f3333c3747aAffected
25030321ba2860c56651429a4f28d94a6483d952 to before 2b9a53940a2bc063ea4cd09ee49220a503a0170cAffected
25030321ba2860c56651429a4f28d94a6483d952 to before 587469076e4ffb617f7ad1a0c4a13072a3e87113Affected
25030321ba2860c56651429a4f28d94a6483d952 to before abf854513bc19e6e24d45353ac99ec5627ee0accAffected
25030321ba2860c56651429a4f28d94a6483d952 to before f0013046151b7467e62c471c1c83d63ea255799cAffected

LinuxLinux

4.6Affected
before 4.6Not affected
5.10.273 through 5.10.*Not affected
5.15.224 through 5.15.*Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.113 through 6.12.*Not affected
6.18.56 through 6.18.*Not affected
7.2.10 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.