CVE-2026-98607
Last modified
CVE-2026-98607 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() virtio_gpu_resource_create_blob_ioctl() calls drm_gem_object_release() on both the virtio_gpu_resource_assign_uuid() and drm_gem_handle_create() error paths instead of dropping the reference it owns, so obj->funcs->free() never runs and the virtio_gpu_object, the resource id and the host-side resource are leaked. Use drm_gem_object_put() instead..
Description
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() virtio_gpu_resource_create_blob_ioctl() calls drm_gem_object_release() on both the virtio_gpu_resource_assign_uuid() and drm_gem_handle_create() error paths instead of dropping the reference it owns, so obj->funcs->free() never runs and the virtio_gpu_object, the resource id and the host-side resource are leaked. Use drm_gem_object_put() instead.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d, < 73ea38a89b923fa08047885a0845d1cd89261ead; >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d, < eea473532a286cd1b13cddbec5c645989f43a3aa; >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d, < 88c60c06a2a5244f5dd32ec098e633add114890f; >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d, < 0455867bbd95ffa9d9db0a1c6dda500f8126232c; >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d, < 81c6769e069d703154087377d1749af2f1b74e49; >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d, < 02df4e24dc4c0bf5b0425a6acabc5201d7f04fc2; >= 897b4d1acaf56314652c6a8e75d9f86b5e45638d, < 24b6d5c7641412c9ebef0d4c8b888d49a0e6b880 |
| Linux | Linux | 5.11 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-98607?
How severe is CVE-2026-98607?
How do I fix CVE-2026-98607?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-98601In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98602In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98603In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98604In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98605In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98606In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98608In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98609In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98610In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98611In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98612In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98613In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-98607?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST