CVE-2026-98513
kernel: drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 18, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's Nouveau graphics driver. When the driver fails to retrieve display information during connector detection, it returns without releasing an acquired runtime Power Management (PM) reference. A local user can trigger this issue to cause a resource leak, preventing the graphics device from entering low-power suspend states and causing increased power consumption.
Statement
This vulnerability is classified as Low severity because it requires local access and only impacts power management states, preventing supported hardware from entering deep sleep modes without affecting system confidentiality, integrity, or general availability. The flaw specifically targets environments running the Nouveau open-source graphics driver with physical NVIDIA hardware attached. Under typical enterprise deployments, headless servers and virtualization hosts do not load this driver, significantly restricting potential exposure.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-911 · Improper Update of Reference Count