---
id: CVE-2026-98607
title: 'drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()

  virtio_gpu_resource_create_blob_ioctl() calls drm_gem_object_release() on
  both the virtio_gpu_r…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d <
    73ea38a89b923fa08047885a0845d1cd89261ead
  - >-
    Linux >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d <
    eea473532a286cd1b13cddbec5c645989f43a3aa
  - >-
    Linux >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d <
    88c60c06a2a5244f5dd32ec098e633add114890f
  - >-
    Linux >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d <
    0455867bbd95ffa9d9db0a1c6dda500f8126232c
  - >-
    Linux >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d <
    81c6769e069d703154087377d1749af2f1b74e49
  - >-
    Linux >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d <
    02df4e24dc4c0bf5b0425a6acabc5201d7f04fc2
  - >-
    Linux >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d <
    24b6d5c7641412c9ebef0d4c8b888d49a0e6b880
  - Linux 5.11
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T15:19:21.585Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98607'
references:
  - url: 'https://git.kernel.org/stable/c/73ea38a89b923fa08047885a0845d1cd89261ead'
  - url: 'https://git.kernel.org/stable/c/eea473532a286cd1b13cddbec5c645989f43a3aa'
  - url: 'https://git.kernel.org/stable/c/88c60c06a2a5244f5dd32ec098e633add114890f'
  - url: 'https://git.kernel.org/stable/c/0455867bbd95ffa9d9db0a1c6dda500f8126232c'
  - url: 'https://git.kernel.org/stable/c/81c6769e069d703154087377d1749af2f1b74e49'
  - url: 'https://git.kernel.org/stable/c/02df4e24dc4c0bf5b0425a6acabc5201d7f04fc2'
  - url: 'https://git.kernel.org/stable/c/24b6d5c7641412c9ebef0d4c8b888d49a0e6b880'
tags:
  - cve.org
ingestedAt: '2026-10-18T15:45:12.241Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()

virtio_gpu_resource_create_blob_ioctl() calls drm_gem_object_release() on
both the virtio_gpu_resource_assign_uuid() and drm_gem_handle_create()
error paths instead of dropping the reference it owns, so
obj->funcs->free() never runs and the virtio_gpu_object, the resource id
and the host-side resource are leaked.

Use drm_gem_object_put() instead.

## Affected

- `Linux >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d < 73ea38a89b923fa08047885a0845d1cd89261ead`
- `Linux >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d < eea473532a286cd1b13cddbec5c645989f43a3aa`
- `Linux >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d < 88c60c06a2a5244f5dd32ec098e633add114890f`
- `Linux >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d < 0455867bbd95ffa9d9db0a1c6dda500f8126232c`
- `Linux >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d < 81c6769e069d703154087377d1749af2f1b74e49`
- `Linux >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d < 02df4e24dc4c0bf5b0425a6acabc5201d7f04fc2`
- `Linux >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d < 24b6d5c7641412c9ebef0d4c8b888d49a0e6b880`
- `Linux 5.11`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.