Not yet scoredPublished Oct 18, 2026

CVE-2026-98784drm/amdgpu/gfx6: fix firmware leak on teardown

Updated under an hour ago (Oct 28, 2026, 6:50 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx6: fix firmware leak on teardown The firmware requested in gfx_v6_0_init_microcode() is not released when the GFX block is torn down, leaking the firmware resources. Add gfx_v6_0_free_microcode() and call it from gfx_v6_0_sw_fini() to release the PFP, ME, CE and RLC firmware. (cherry picked from commit 386e81346f95ab0be5a82c5535de932e7a456924)

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 26, 2026
First seen by InfoSec Signals: Oct 18, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	2cd46ad22383ab8372b86cdb5257589496099412 builds before 2aee72150b0ea92804f0f2799efb129f10e46e8d; from 2cd46ad22383ab8372b86cdb5257589496099412 before 3a86ebf6aa8b0a845e6188daaa6f530fe67ff00e; from 2cd46ad22383ab8372b86cdb5257589496099412 before 652f631e2e3a8d3b11ad72dd0b8e59b5183de0d9; from 2cd46ad22383ab8372b86cdb5257589496099412 before 4b70c6b34912ca0b4066f56fd627d785dfbfe1fa; from 2cd46ad22383ab8372b86cdb5257589496099412 before cc172e177795c5f87bc2d71768d077e1c10633e8	CNA record

References

References

https://git.kernel.org/stable/c/2aee72150b0ea92804f0f2799efb129f10e46e8d
https://git.kernel.org/stable/c/3a86ebf6aa8b0a845e6188daaa6f530fe67ff00e
https://git.kernel.org/stable/c/652f631e2e3a8d3b11ad72dd0b8e59b5183de0d9
https://git.kernel.org/stable/c/4b70c6b34912ca0b4066f56fd627d785dfbfe1fa
https://git.kernel.org/stable/c/cc172e177795c5f87bc2d71768d077e1c10633e8

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.