All vulnerabilities
CVE-2026-98784

Linux: drm/amdgpu/gfx6: fix firmware leak on teardown

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in2aee72150b0ea92804f0f2799efb129f10e46e8dAlso 3a86ebf6aa8b0a845e6188daaa6f530fe67ff00e, 652f631e2e3a8d3b11ad72dd0b8e59b5183de0d9 and 5 moreCVE List
Published18 Oct 2026Updated 21 Oct 2026CVE List

What fixes it

  • 2aee72150b0ea92804f0f2799efb129f10e46e8dLinuxCVE List
  • 3a86ebf6aa8b0a845e6188daaa6f530fe67ff00eLinuxCVE List
  • 652f631e2e3a8d3b11ad72dd0b8e59b5183de0d9LinuxCVE List
  • 4b70c6b34912ca0b4066f56fd627d785dfbfe1faLinuxCVE List
  • 6.6.160LinuxCVE List
  • 6.12.113LinuxCVE List
Show all 8 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/gfx6: fix firmware leak on teardown

The firmware requested in gfx_v6_0_init_microcode() is not released when the GFX block is torn down, leaking the firmware resources.

Add gfx_v6_0_free_microcode() and call it from gfx_v6_0_sw_fini() to release the PFP, ME, CE and RLC firmware.

(cherry picked from commit 386e81346f95ab0be5a82c5535de932e7a456924)

Text from CVE List

Affected versions 14

  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 2aee72150b0ea92804f0f2799efb129f10e46e8dCVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 3a86ebf6aa8b0a845e6188daaa6f530fe67ff00eCVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 652f631e2e3a8d3b11ad72dd0b8e59b5183de0d9CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 4b70c6b34912ca0b4066f56fd627d785dfbfe1faCVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before cc172e177795c5f87bc2d71768d077e1c10633e8CVE List
  • Linuxaffected: all versions before 6.6.160CVE List
  • Linuxaffected: all versions before 6.12.113CVE List
  • Linuxaffected: all versions before 6.18.56CVE List
  • Linuxaffected: all versions before 7.2.10CVE List
  • Linuxunaffected: 6.6.160 through 6.6.*CVE List
  • Linuxunaffected: 6.12.113 through 6.12.*CVE List
  • Linuxunaffected: 6.18.56 through 6.18.*CVE List
  • Linuxunaffected: 7.2.10 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 5