CVE-2026-98514

A flaw was found in the Linux kernel's Nouveau graphics driver, which can lead to a Denial of Service (DoS). A local user can trigger this flaw during graphics buffer validation operations that encounter specific error paths. Because the driver fails to properly release object references when these errors occur, the unreleased objects cause a reference leak. Repeated exploitation can exhaust system memory resources and compromise system availability.

This vulnerability is rated as having Low severity for Red Hat products because exploitation is confined to local authenticated users on systems equipped with NVIDIA hardware actively using the open source Nouveau driver. In typical enterprise server deployments without graphical workstations or where alternative graphics stacks are utilized, the affected module is not loaded. Successful abuse requires repeated failed operations to trigger an incremental memory leak, resulting only in potential resource exhaustion without impacting data confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.