{"id":"CVE-2026-98516","title":"drm/nouveau: Fix bridge reference leak in nv1a_ram_new()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: Fix bridge reference leak in nv1a_ram_new()\n\npci_get_domain_bus_and_slot() takes a reference to the PCI device,\nwhich is never released once the memory siz…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 < add5e0a45e3971df9c65cc7b59c90559a25dc5a9","Linux >= 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 < 2bda86f1fb2373a2ad8900341d5d6a6d68ce6ddb","Linux >= 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 < 9ffb43369ae51af5d5646b1ef680ab1af0fb4ad9","Linux >= 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 < ac4f1d28498b9798fc20f91f23a4256032186370","Linux >= 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 < 553c86816e99855d6784eebd2588d5d2198c280e","Linux >= 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 < 6d497216c10af3dc9747b399295f385fabbac9e5","Linux >= 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 < 3e0861ebb9ecf0b726ea42123bd579362ec1f977","Linux >= 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 < 67b4411538c8341692548429d43256f25be99f7a","Linux 4.16"],"published":"2026-10-18","updated":"2026-10-18","sourceUpdated":"2026-10-18T15:17:34.436Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98516","references":[{"url":"https://git.kernel.org/stable/c/add5e0a45e3971df9c65cc7b59c90559a25dc5a9"},{"url":"https://git.kernel.org/stable/c/2bda86f1fb2373a2ad8900341d5d6a6d68ce6ddb"},{"url":"https://git.kernel.org/stable/c/9ffb43369ae51af5d5646b1ef680ab1af0fb4ad9"},{"url":"https://git.kernel.org/stable/c/ac4f1d28498b9798fc20f91f23a4256032186370"},{"url":"https://git.kernel.org/stable/c/553c86816e99855d6784eebd2588d5d2198c280e"},{"url":"https://git.kernel.org/stable/c/6d497216c10af3dc9747b399295f385fabbac9e5"},{"url":"https://git.kernel.org/stable/c/3e0861ebb9ecf0b726ea42123bd579362ec1f977"},{"url":"https://git.kernel.org/stable/c/67b4411538c8341692548429d43256f25be99f7a"}],"tags":["cve.org"],"ingestedAt":"2026-10-18T15:45:12.284Z","slug":"CVE-2026-98516","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: Fix bridge reference leak in nv1a_ram_new()\n\npci_get_domain_bus_and_slot() takes a reference to the PCI device,\nwhich is never released once the memory size has been read from its\nconfig space.  Drop the reference before returning.\n\n## Affected\n\n- `Linux >= 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 < add5e0a45e3971df9c65cc7b59c90559a25dc5a9`\n- `Linux >= 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 < 2bda86f1fb2373a2ad8900341d5d6a6d68ce6ddb`\n- `Linux >= 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 < 9ffb43369ae51af5d5646b1ef680ab1af0fb4ad9`\n- `Linux >= 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 < ac4f1d28498b9798fc20f91f23a4256032186370`\n- `Linux >= 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 < 553c86816e99855d6784eebd2588d5d2198c280e`\n- `Linux >= 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 < 6d497216c10af3dc9747b399295f385fabbac9e5`\n- `Linux >= 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 < 3e0861ebb9ecf0b726ea42123bd579362ec1f977`\n- `Linux >= 2fa6d6cdaf283c05ae23842b2a04aeb223203c13 < 67b4411538c8341692548429d43256f25be99f7a`\n- `Linux 4.16`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}