CVE-2026-52904

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix nvkm_device leak on aperture removal failure When aperture_remove_conflicting_pci_devices() fails during probe, the error path returns directly without unwinding the nvkm_device that was just allocated by nvkm_device_pci_new(). This leaks both the device wrapper and the pci_enable_device() reference taken inside it. Jump to the existing fail_nvkm label so nvkm_device_del() runs and balances both. The leak was introduced when the intermediate nvkm_device_del() between detection and aperture removal was dropped in favor of creating the pci device once.

• CWE-401

• https://git.kernel.org/stable/c/4404d7d2dda4f3cc84a8fb6ac5417a2afc3b22d6Patch
• https://git.kernel.org/stable/c/5edd564ccb002ffc830e7818c1c4a992db774678Patch
• https://git.kernel.org/stable/c/6597ff1d8de3f583be169587efeafd8af134e138Patch
• https://git.kernel.org/stable/c/843c0247cf21364e33bb5a8ffc9af57107d04d05Patch

Published

Jun 9, 2026

Last Modified

Jul 23, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-52890Wekan is open source kanban built with Meteor. Prior to 9.31…7.1
• CVE-2026-52891Wekan is open source kanban built with Meteor. Prior to 9.07…9.9
• CVE-2026-52892Wekan is open source kanban built with Meteor. Prior to 9.32…6.5
• CVE-2026-52893Wekan is open source kanban built with Meteor. Prior to 9.32…9.2
• CVE-2026-5290Use after free in Compositing in Google Chrome prior to 146.…9.6
• CVE-2026-52902A path traversal vulnerability was found in awxkit, the CLI …4.7
• CVE-2026-52905In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-52906In the Linux kernel, the following vulnerability has been re…7.7
• CVE-2026-52907In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-52908In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-52909In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-5291Inappropriate implementation in WebGL in Google Chrome prior…6.5