---
id: CVE-2026-98179
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/amdgpu: fix rmmio iounmap skipped on device removal

  amdgpu_pci_remove() calls drm_dev_unplug() before fini_sw(), so
  drm_dev_enter() is already false there and the …
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/amdgpu: fix rmmio iounmap skipped on device removal

  amdgpu_pci_remove() calls drm_dev_unplug() before fini_sw(), so
  drm_dev_enter() is already false there and the …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 62d5f9f7110ad374db67ab4820f4ff2d916c3cdb <
    e81502d6791df9ecd003bfb2ca44f0d1f1b38439
  - >-
    Linux >= 62d5f9f7110ad374db67ab4820f4ff2d916c3cdb <
    cd55dde2b63789a3dafe982c89844f537501d096
  - >-
    Linux >= 62d5f9f7110ad374db67ab4820f4ff2d916c3cdb <
    a645584c3ccc493ee835f77155829442bd7578c3
  - >-
    Linux >= 62d5f9f7110ad374db67ab4820f4ff2d916c3cdb <
    5155002b03b24ba3ef91c5c313b8cf0171b24904
  - Linux 5.17
published: '2026-10-06'
updated: '2026-10-06'
sourceUpdated: '2026-10-06T09:18:00.123'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98179'
references:
  - url: 'https://git.kernel.org/stable/c/5155002b03b24ba3ef91c5c313b8cf0171b24904'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/a645584c3ccc493ee835f77155829442bd7578c3'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/cd55dde2b63789a3dafe982c89844f537501d096'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e81502d6791df9ecd003bfb2ca44f0d1f1b38439'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-10-06T08:50:17.452Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: fix rmmio iounmap skipped on device removal

amdgpu_pci_remove() calls drm_dev_unplug() before fini_sw(), so
drm_dev_enter() is already false there and the iounmap() guarded by it
is skipped. This .remove path runs on both hot-unplug and plain rmmod,
so the register BAR ioremap mapping leaks one instance per unload.

Unmap rmmio unconditionally (guard only on non-NULL) and drop the now
unused idx.

(cherry picked from commit dd6f86a97260e5207d3329ad03aa89fdad61b1e6)

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.