CVE-2026-98784

drm/amdgpu/gfx6: fix firmware leak on teardown

State: Published
Severity: Not scored
Published: Oct 18, 2026
Updated: Oct 30, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/gfx6: fix firmware leak on teardown

The firmware requested in gfx_v6_0_init_microcode() is not released when the GFX block is torn down, leaking the firmware resources.

Add gfx_v6_0_free_microcode() and call it from gfx_v6_0_sw_fini() to release the PFP, ME, CE and RLC firmware.

(cherry picked from commit 386e81346f95ab0be5a82c5535de932e7a456924)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2cd46ad22383ab8372b86cdb5257589496099412 to before 59bdbbb70be95100aab3a3a3f4017861c0bbef8cAffected 2cd46ad22383ab8372b86cdb5257589496099412 to before 18b7d69dabb61551d3a45be6300b0e6e6b04d02cAffected 2cd46ad22383ab8372b86cdb5257589496099412 to before bf3a59afc6e57957eb66ab3a86e24e2ad8b8e8d8Affected 2cd46ad22383ab8372b86cdb5257589496099412 to before 2aee72150b0ea92804f0f2799efb129f10e46e8dAffected 2cd46ad22383ab8372b86cdb5257589496099412 to before 3a86ebf6aa8b0a845e6188daaa6f530fe67ff00eAffected 2cd46ad22383ab8372b86cdb5257589496099412 to before 652f631e2e3a8d3b11ad72dd0b8e59b5183de0d9Affected 2cd46ad22383ab8372b86cdb5257589496099412 to before 4b70c6b34912ca0b4066f56fd627d785dfbfe1faAffected 2cd46ad22383ab8372b86cdb5257589496099412 to before cc172e177795c5f87bc2d71768d077e1c10633e8Affected
LinuxLinux	4.9Affected before 4.9Not affected 5.10.273 through 5.10.Not affected 5.15.224 through 5.15.Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.113 through 6.12.Not affected 6.18.56 through 6.18.Not affected 7.2.10 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

2cd46ad22383ab8372b86cdb5257589496099412 to before 59bdbbb70be95100aab3a3a3f4017861c0bbef8cAffected
2cd46ad22383ab8372b86cdb5257589496099412 to before 18b7d69dabb61551d3a45be6300b0e6e6b04d02cAffected
2cd46ad22383ab8372b86cdb5257589496099412 to before bf3a59afc6e57957eb66ab3a86e24e2ad8b8e8d8Affected
2cd46ad22383ab8372b86cdb5257589496099412 to before 2aee72150b0ea92804f0f2799efb129f10e46e8dAffected
2cd46ad22383ab8372b86cdb5257589496099412 to before 3a86ebf6aa8b0a845e6188daaa6f530fe67ff00eAffected
2cd46ad22383ab8372b86cdb5257589496099412 to before 652f631e2e3a8d3b11ad72dd0b8e59b5183de0d9Affected
2cd46ad22383ab8372b86cdb5257589496099412 to before 4b70c6b34912ca0b4066f56fd627d785dfbfe1faAffected
2cd46ad22383ab8372b86cdb5257589496099412 to before cc172e177795c5f87bc2d71768d077e1c10633e8Affected

LinuxLinux

4.9Affected
before 4.9Not affected
5.10.273 through 5.10.*Not affected
5.15.224 through 5.15.*Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.113 through 6.12.*Not affected
6.18.56 through 6.18.*Not affected
7.2.10 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.