CVE Database›Document archive›CVE-2026-98513

CVE-2026-98513

kernel: drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()

Loading…

Severity

Low

Red Hat Product Security

3.3

CVSS 3.1

Review impact separately from score.

Published · October 18, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's Nouveau graphics driver. When the driver fails to retrieve display information during connector detection, it returns without releasing an acquired runtime Power Management (PM) reference. A local user can trigger this issue to cause a resource leak, preventing the graphics device from entering low-power suspend states and causing increased power consumption.

Statement

This vulnerability is classified as Low severity because it requires local access and only impacts power management states, preventing supported hardware from entering deep sleep modes without affecting system confidentiality, integrity, or general availability. The flaw specifically targets environments running the Nouveau open-source graphics driver with physical NVIDIA hardware attached. Under typical enterprise deployments, headless servers and virtualization hosts do not load this driver, significantly restricting potential exposure.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-911 · Improper Update of Reference Count