-

CVE-2026-98607

drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()

In the Linux kernel, the following vulnerability has been resolved:

drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()

virtio_gpu_resource_create_blob_ioctl() calls drm_gem_object_release() on
both the virtio_gpu_resource_assign_uuid() and drm_gem_handle_create()
error paths instead of dropping the reference it owns, so
obj->funcs->free() never runs and the virtio_gpu_object, the resource id
and the host-side resource are leaked.

Use drm_gem_object_put() instead.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 897b4d1acaf56314652c6a8e75d9f86b5e45638d
Version < 73ea38a89b923fa08047885a0845d1cd89261ead
Status affected
Version 897b4d1acaf56314652c6a8e75d9f86b5e45638d
Version < eea473532a286cd1b13cddbec5c645989f43a3aa
Status affected
Version 897b4d1acaf56314652c6a8e75d9f86b5e45638d
Version < 88c60c06a2a5244f5dd32ec098e633add114890f
Status affected
Version 897b4d1acaf56314652c6a8e75d9f86b5e45638d
Version < 0455867bbd95ffa9d9db0a1c6dda500f8126232c
Status affected
Version 897b4d1acaf56314652c6a8e75d9f86b5e45638d
Version < 81c6769e069d703154087377d1749af2f1b74e49
Status affected
Version 897b4d1acaf56314652c6a8e75d9f86b5e45638d
Version < 02df4e24dc4c0bf5b0425a6acabc5201d7f04fc2
Status affected
Version 897b4d1acaf56314652c6a8e75d9f86b5e45638d
Version < 24b6d5c7641412c9ebef0d4c8b888d49a0e6b880
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.11
Status affected
Version 0
Version < 5.11
Status unaffected
Version <= 5.15.*
Version 5.15.222
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.112
Status unaffected
Version <= 6.18.*
Version 6.18.55
Status unaffected
Version <= 7.2.*
Version 7.2.9
Status unaffected
Version <= *
Version 7.3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.062
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/73ea38a89b923fa08047885a0845d1cd89261ead
https://git.kernel.org/stable/c/eea473532a286cd1b13cddbec5c645989f43a3aa
https://git.kernel.org/stable/c/88c60c06a2a5244f5dd32ec098e633add114890f
https://git.kernel.org/stable/c/0455867bbd95ffa9d9db0a1c6dda500f8126232c
https://git.kernel.org/stable/c/81c6769e069d703154087377d1749af2f1b74e49
https://git.kernel.org/stable/c/02df4e24dc4c0bf5b0425a6acabc5201d7f04fc2
https://git.kernel.org/stable/c/24b6d5c7641412c9ebef0d4c8b888d49a0e6b880