CVE-2026-98607

A flaw was found in the Linux kernel's VirtIO GPU driver. This vulnerability allows a local user to cause a denial of service (DoS) through memory and resource exhaustion. When errors occur during the creation of graphical resources, the driver fails to properly release object references, preventing allocated kernel objects and host-side resources from being freed. An attacker can repeatedly trigger these error conditions to leak system memory over time, degrading performance or rendering the system unresponsive.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.