CVE-2026-98519

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98519", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.354Z", "datePublished": "2026-10-18T15:17:37.306Z", "dateUpdated": "2026-10-30T12:38:22.800Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-30T12:38:22.800Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()\n\namdgpu_debugfs_test_ib_show() resumes the device with\npm_runtime_get_sync() before taking the reset domain semaphore with\ndown_write_killable(). If the write lock acquisition is interrupted,\nthe function returns without calling pm_runtime_put_autosuspend(),\nleaking the runtime PM reference acquired for the device and keeping\nthe GPU awake.\n\nDrop the runtime PM reference on the interrupted down_write_killable()\nerror path before returning.\n\n(cherry picked from commit ec30a576c2d4c0364549e6c04218f50704ef56c8)"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c"], "versions": [{"version": "6049db43d6dd9cbb9d7f897839d15b0bc600e23c", "lessThan": "6d2ccd1b810654ec4d26ccda0482283ffe22dda2", "status": "affected", "versionType": "git"}, {"version": "6049db43d6dd9cbb9d7f897839d15b0bc600e23c", "lessThan": "878cfe9f2e2850cc1d998491776db3f7bc58e1dd", "status": "affected", "versionType": "git"}, {"version": "6049db43d6dd9cbb9d7f897839d15b0bc600e23c", "lessThan": "fc5606ac91642d0f184b83ab833148c457c3c331", "status": "affected", "versionType": "git"}, {"version": "6049db43d6dd9cbb9d7f897839d15b0bc600e23c", "lessThan": "2c1a643942caae938ea84df2648a9b0c136e09be", "status": "affected", "versionType": "git"}, {"version": "6049db43d6dd9cbb9d7f897839d15b0bc600e23c", "lessThan": "e016347fb1829489e062ea51a98a51f48b1d582d", "status": "affected", "versionType": "git"}, {"version": "6049db43d6dd9cbb9d7f897839d15b0bc600e23c", "lessThan": "c28e74395ab09922bbf5be42bc5a6ed1ba4f3c37", "status": "affected", "versionType": "git"}, {"version": "6049db43d6dd9cbb9d7f897839d15b0bc600e23c", "lessThan": "2556dd3a36beb3a11041ef01b5e9762e2157909f", "status": "affected", "versionType": "git"}, {"version": "6049db43d6dd9cbb9d7f897839d15b0bc600e23c", "lessThan": "2b86ab1bd6673c525adda88819d7658ba9e784ec", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c"], "versions": [{"version": "5.10", "status": "affected"}, {"version": "0", "lessThan": "5.10", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.273", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.224", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.189", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.158", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.112", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.55", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.9", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "5.10.273"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "5.15.224"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.1.189"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.6.158"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.12.112"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.18.55"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "7.2.9"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/6d2ccd1b810654ec4d26ccda0482283ffe22dda2"}, {"url": "https://git.kernel.org/stable/c/878cfe9f2e2850cc1d998491776db3f7bc58e1dd"}, {"url": "https://git.kernel.org/stable/c/fc5606ac91642d0f184b83ab833148c457c3c331"}, {"url": "https://git.kernel.org/stable/c/2c1a643942caae938ea84df2648a9b0c136e09be"}, {"url": "https://git.kernel.org/stable/c/e016347fb1829489e062ea51a98a51f48b1d582d"}, {"url": "https://git.kernel.org/stable/c/c28e74395ab09922bbf5be42bc5a6ed1ba4f3c37"}, {"url": "https://git.kernel.org/stable/c/2556dd3a36beb3a11041ef01b5e9762e2157909f"}, {"url": "https://git.kernel.org/stable/c/2b86ab1bd6673c525adda88819d7658ba9e784ec"}], "title": "drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "6d2ccd1b810654ec4d26ccda0482283ffe22dda2", "status": "affected", "version": "6049db43d6dd9cbb9d7f897839d15b0bc600e23c", "versionType": "git"}, {"lessThan": "878cfe9f2e2850cc1d998491776db3f7bc58e1dd", "status": "affected", "version": "6049db43d6dd9cbb9d7f897839d15b0bc600e23c", "versionType": "git"}, {"lessThan": "fc5606ac91642d0f184b83ab833148c457c3c331", "status": "affected", "version": "6049db43d6dd9cbb9d7f897839d15b0bc600e23c", "versionType": "git"}, {"lessThan": "2c1a643942caae938ea84df2648a9b0c136e09be", "status": "affected", "version": "6049db43d6dd9cbb9d7f897839d15b0bc600e23c", "versionType": "git"}, {"lessThan": "e016347fb1829489e062ea51a98a51f48b1d582d", "status": "affected", "version": "6049db43d6dd9cbb9d7f897839d15b0bc600e23c", "versionType": "git"}, {"lessThan": "c28e74395ab09922bbf5be42bc5a6ed1ba4f3c37", "status": "affected", "version": "6049db43d6dd9cbb9d7f897839d15b0bc600e23c", "versionType": "git"}, {"lessThan": "2556dd3a36beb3a11041ef01b5e9762e2157909f", "status": "affected", "version": "6049db43d6dd9cbb9d7f897839d15b0bc600e23c", "versionType": "git"}, {"lessThan": "2b86ab1bd6673c525adda88819d7658ba9e784ec", "status": "affected", "version": "6049db43d6dd9cbb9d7f897839d15b0bc600e23c", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.10"}, {"lessThan": "5.10", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.273", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.224", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.189", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.158", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.112", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.55", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.9", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()\n\namdgpu_debugfs_test_ib_show() resumes the device with\npm_runtime_get_sync() before taking the reset domain semaphore with\ndown_write_killable(). If the write lock acquisition is interrupted,\nthe function returns without calling pm_runtime_put_autosuspend(),\nleaking the runtime PM reference acquired for the device and keeping\nthe GPU awake.\n\nDrop the runtime PM reference on the interrupted down_write_killable()\nerror path before returning.\n\n(cherry picked from commit ec30a576c2d4c0364549e6c04218f50704ef56c8)"}], "id": "CVE-2026-98519", "lastModified": "2026-10-30T13:21:15.693", "metrics": {}, "published": "2026-10-18T16:17:03.260", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/2556dd3a36beb3a11041ef01b5e9762e2157909f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/2b86ab1bd6673c525adda88819d7658ba9e784ec"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/2c1a643942caae938ea84df2648a9b0c136e09be"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6d2ccd1b810654ec4d26ccda0482283ffe22dda2"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/878cfe9f2e2850cc1d998491776db3f7bc58e1dd"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c28e74395ab09922bbf5be42bc5a6ed1ba4f3c37"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e016347fb1829489e062ea51a98a51f48b1d582d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/fc5606ac91642d0f184b83ab833148c457c3c331"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()", "id": "2554829", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2554829"}, "csaw": false, "cvss3": {"cvss3_base_score": "1.9", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-911", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ndrm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()\namdgpu_debugfs_test_ib_show() resumes the device with\npm_runtime_get_sync() before taking the reset domain semaphore with\ndown_write_killable(). If the write lock acquisition is interrupted,\nthe function returns without calling pm_runtime_put_autosuspend(),\nleaking the runtime PM reference acquired for the device and keeping\nthe GPU awake.\nDrop the runtime PM reference on the interrupted down_write_killable()\nerror path before returning.\n(cherry picked from commit ec30a576c2d4c0364549e6c04218f50704ef56c8)", "A flaw was found in the Linux kernel's AMD GPU (amdgpu) driver. A local user with access to the debugfs interface can trigger an interrupted lock operation during device testing, which prevents the driver from releasing an acquired runtime power management reference. Consequently, the graphics processing unit (GPU) cannot enter power-saving suspend states, leading to increased power consumption and resource exhaustion."], "name": "CVE-2026-98519", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98519\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98519\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98519.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6049db43d6dd9cbb9d7f897839d15b0bc600e23c,fc5606ac91642d0f184b83ab833148c457c3c331)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6049db43d6dd9cbb9d7f897839d15b0bc600e23c,2c1a643942caae938ea84df2648a9b0c136e09be)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6049db43d6dd9cbb9d7f897839d15b0bc600e23c,e016347fb1829489e062ea51a98a51f48b1d582d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6049db43d6dd9cbb9d7f897839d15b0bc600e23c,c28e74395ab09922bbf5be42bc5a6ed1ba4f3c37)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6049db43d6dd9cbb9d7f897839d15b0bc600e23c,2556dd3a36beb3a11041ef01b5e9762e2157909f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6049db43d6dd9cbb9d7f897839d15b0bc600e23c,2b86ab1bd6673c525adda88819d7658ba9e784ec)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.10"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.10)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.189,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.158,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.112,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.55,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.9,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc5,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-19T00:15:14.331638+00:00", "updated": "2026-10-20T20:00:15.874030+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}