CVE-2026-98513

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98513", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.354Z", "datePublished": "2026-10-18T15:17:29.308Z", "dateUpdated": "2026-10-19T09:20:53.197Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:20:53.197Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: Fix runtime PM leak in nouveau_connector_detect()\n\nIf nvif_outp_edid_get() fails, nouveau_connector_detect() returns\nearly without dropping the runtime PM reference taken at the start\nof the function, keeping the device powered on until the next\nsuccessful detect.\n\nBalance the reference on the error path like the other exit paths\ndo."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/nouveau/nouveau_connector.c"], "versions": [{"version": "0cd7e07181390085742bf623d6af3eef215c0503", "lessThan": "87c2f8ce1100ccbbc40bfab067741edbd1f0ef02", "status": "affected", "versionType": "git"}, {"version": "0cd7e07181390085742bf623d6af3eef215c0503", "lessThan": "59aa1f8c95941e623891d46c805e8fb1257b5a3d", "status": "affected", "versionType": "git"}, {"version": "0cd7e07181390085742bf623d6af3eef215c0503", "lessThan": "780ad8e4df9f767806587d33b42372acf8fbe5e6", "status": "affected", "versionType": "git"}, {"version": "0cd7e07181390085742bf623d6af3eef215c0503", "lessThan": "1e04611d3735543bd80a67d9d13dc13f503746fb", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/nouveau/nouveau_connector.c"], "versions": [{"version": "6.7", "status": "affected"}, {"version": "0", "lessThan": "6.7", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.112", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.55", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.9", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "6.12.112"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "6.18.55"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "7.2.9"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/87c2f8ce1100ccbbc40bfab067741edbd1f0ef02"}, {"url": "https://git.kernel.org/stable/c/59aa1f8c95941e623891d46c805e8fb1257b5a3d"}, {"url": "https://git.kernel.org/stable/c/780ad8e4df9f767806587d33b42372acf8fbe5e6"}, {"url": "https://git.kernel.org/stable/c/1e04611d3735543bd80a67d9d13dc13f503746fb"}], "title": "drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/gpu/drm/nouveau/nouveau_connector.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "87c2f8ce1100ccbbc40bfab067741edbd1f0ef02", "status": "affected", "version": "0cd7e07181390085742bf623d6af3eef215c0503", "versionType": "git"}, {"lessThan": "59aa1f8c95941e623891d46c805e8fb1257b5a3d", "status": "affected", "version": "0cd7e07181390085742bf623d6af3eef215c0503", "versionType": "git"}, {"lessThan": "780ad8e4df9f767806587d33b42372acf8fbe5e6", "status": "affected", "version": "0cd7e07181390085742bf623d6af3eef215c0503", "versionType": "git"}, {"lessThan": "1e04611d3735543bd80a67d9d13dc13f503746fb", "status": "affected", "version": "0cd7e07181390085742bf623d6af3eef215c0503", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/gpu/drm/nouveau/nouveau_connector.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.7"}, {"lessThan": "6.7", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.112", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.55", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.9", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: Fix runtime PM leak in nouveau_connector_detect()\n\nIf nvif_outp_edid_get() fails, nouveau_connector_detect() returns\nearly without dropping the runtime PM reference taken at the start\nof the function, keeping the device powered on until the next\nsuccessful detect.\n\nBalance the reference on the error path like the other exit paths\ndo."}], "id": "CVE-2026-98513", "lastModified": "2026-10-19T10:19:04.903", "metrics": {}, "published": "2026-10-18T16:17:02.557", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1e04611d3735543bd80a67d9d13dc13f503746fb"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/59aa1f8c95941e623891d46c805e8fb1257b5a3d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/780ad8e4df9f767806587d33b42372acf8fbe5e6"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/87c2f8ce1100ccbbc40bfab067741edbd1f0ef02"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()", "id": "2554896", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2554896"}, "csaw": false, "cvss3": {"cvss3_base_score": "3.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-911", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ndrm/nouveau: Fix runtime PM leak in nouveau_connector_detect()\nIf nvif_outp_edid_get() fails, nouveau_connector_detect() returns\nearly without dropping the runtime PM reference taken at the start\nof the function, keeping the device powered on until the next\nsuccessful detect.\nBalance the reference on the error path like the other exit paths\ndo.", "A flaw was found in the Linux kernel's Nouveau graphics driver. When the driver fails to retrieve display information during connector detection, it returns without releasing an acquired runtime Power Management (PM) reference. A local user can trigger this issue to cause a resource leak, preventing the graphics device from entering low-power suspend states and causing increased power consumption."], "name": "CVE-2026-98513", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98513\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98513\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98513.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0cd7e07181390085742bf623d6af3eef215c0503,87c2f8ce1100ccbbc40bfab067741edbd1f0ef02)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0cd7e07181390085742bf623d6af3eef215c0503,59aa1f8c95941e623891d46c805e8fb1257b5a3d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0cd7e07181390085742bf623d6af3eef215c0503,780ad8e4df9f767806587d33b42372acf8fbe5e6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0cd7e07181390085742bf623d6af3eef215c0503,1e04611d3735543bd80a67d9d13dc13f503746fb)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.7"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.7)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.112,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.55,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.9,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc5,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-18T23:45:07.049735+00:00", "updated": "2026-10-20T12:15:14.053746+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-668", "CWE-911"]}