Strix
73.2K

CVE-2026-98519

UnknownEPSS 0.21%

Last modified

CVE-2026-98519 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() amdgpu_debugfs_test_ib_show() resumes the device with pm_runtime_get_sync() before taking the reset domain semaphore with down_write_killable(). If the write lock acquisition is interrupted, the function returns without calling pm_runtime_put_autosuspend(), leaking the runtime PM reference acquired for the device and keeping the GPU awake. Drop the runtime PM reference on the interrupted down_write_killable() error path before returning. (cherry picked from commit ec30a576c2d4c0364549e6c04218f50704ef56c8). EPSS estimates a 0.21% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() amdgpu_debugfs_test_ib_show() resumes the device with pm_runtime_get_sync() before taking the reset domain semaphore with down_write_killable(). If the write lock acquisition is interrupted, the function returns without calling pm_runtime_put_autosuspend(), leaking the runtime PM reference acquired for the device and keeping the GPU awake. Drop the runtime PM reference on the interrupted down_write_killable() error path before returning. (cherry picked from commit ec30a576c2d4c0364549e6c04218f50704ef56c8)

Metrics

EPSS Probability
0.21%

11.4th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 6049db43d6dd9cbb9d7f897839d15b0bc600e23c, < 6d2ccd1b810654ec4d26ccda0482283ffe22dda2; >= 6049db43d6dd9cbb9d7f897839d15b0bc600e23c, < 878cfe9f2e2850cc1d998491776db3f7bc58e1dd; >= 6049db43d6dd9cbb9d7f897839d15b0bc600e23c, < fc5606ac91642d0f184b83ab833148c457c3c331; >= 6049db43d6dd9cbb9d7f897839d15b0bc600e23c, < 2c1a643942caae938ea84df2648a9b0c136e09be; >= 6049db43d6dd9cbb9d7f897839d15b0bc600e23c, < e016347fb1829489e062ea51a98a51f48b1d582d; >= 6049db43d6dd9cbb9d7f897839d15b0bc600e23c, < c28e74395ab09922bbf5be42bc5a6ed1ba4f3c37; >= 6049db43d6dd9cbb9d7f897839d15b0bc600e23c, < 2556dd3a36beb3a11041ef01b5e9762e2157909f; >= 6049db43d6dd9cbb9d7f897839d15b0bc600e23c, < 2b86ab1bd6673c525adda88819d7658ba9e784ec
LinuxLinux5.10

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98519?
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() amdgpu_debugfs_test_ib_show() resumes the device with pm_runtime_get_sync() before taking the reset domain semaphore with down_write_killable(). If the write lock acquisition is interrupted, the function returns without calling pm_runtime_put_autosuspend(), leaking the runtime PM reference acquired for the device and keeping the GPU awake. Drop the runtime PM reference on the interrupted down_write_killable() error path before returning. (cherry picked from commit ec30a576c2d4c0364549e6c04218f50704ef56c8)
How severe is CVE-2026-98519?
Severity scoring for CVE-2026-98519 is pending analysis. The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2026-98519?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98519?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST