CVE-2026-98517

A flaw was found in the Linux kernel's Nouveau graphics driver. When handling buffer objects in system memory, the driver improperly accesses memory past the allocated resource boundary. A local attacker could exploit this flaw to cause a Denial of Service (DoS) through a kernel crash or potentially access sensitive kernel information.

Red Hat has rated this vulnerability as Moderate because exploitation requires local user access and is restricted to environments actively using NVIDIA graphics hardware supported by the Nouveau driver. Standard enterprise deployments, such as headless server or virtual machine instances that do not load display drivers, are not exposed to this flaw. An unprivileged local attacker could leverage this condition to cause a system crash resulting in a denial of service, or potentially read restricted kernel memory.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.