01 Record

CVE-2026-98515

drm/nouveau: fix double-free in nvif_vmm_dtor

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

drm/nouveau: fix double-free in nvif_vmm_dtor

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.16% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 6.2% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Received. NVD last modified this record on 2026-10-24.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-10-18 15:17Z11 DAYS AGO

Last updated

2026-10-24 14:09Z5 DAYS AGO

Reserved

2026-09-25

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-1341Multiple Releases of Same Resource or HandleBase

Data version

5.2

Document digest

a53c3ef46ca1cd3c43fc23fe493fda5ce4db3862eabb01c248e7704ea2b19e77

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux20d8a88e557aae5264e793f4626c45cd644c7144 to < 023e7a01f8fb27799f0987b5bcda325d73a2904c, 20d8a88e557aae5264e793f4626c45cd644c7144 to < 375901ac0f286e81be00a4126e57d488cb401884, 20d8a88e557aae5264e793f4626c45cd644c7144 to < bf542ecd4f60d4689818d194e7ca74772fe0f8b5, 20d8a88e557aae5264e793f4626c45cd644c7144 to < f09f4a536935b15539f2de9fe775a2641202be90, 20d8a88e557aae5264e793f4626c45cd644c7144 to < 279e5ac137370e274a09dd552547ae6bddd0d4d5, 20d8a88e557aae5264e793f4626c45cd644c7144 to < 109a8d2d5b7d2719ebe09df3f9241023900b3846, 20d8a88e557aae5264e793f4626c45cd644c7144 to < 872a5473c02a26c955be44d52b7ab2f8ea70a2cf, 20d8a88e557aae5264e793f4626c45cd644c7144 to < 97077ac87afe9e91ec074ef0be64454e7ccbf344, 4.11—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/023e7a01f8fb27799f0987b5bcda325d73a2904c
git.kernel.orghttps://git.kernel.org/stable/c/375901ac0f286e81be00a4126e57d488cb401884
git.kernel.orghttps://git.kernel.org/stable/c/bf542ecd4f60d4689818d194e7ca74772fe0f8b5
git.kernel.orghttps://git.kernel.org/stable/c/f09f4a536935b15539f2de9fe775a2641202be90
git.kernel.orghttps://git.kernel.org/stable/c/279e5ac137370e274a09dd552547ae6bddd0d4d5
git.kernel.orghttps://git.kernel.org/stable/c/109a8d2d5b7d2719ebe09df3f9241023900b3846
git.kernel.orghttps://git.kernel.org/stable/c/872a5473c02a26c955be44d52b7ab2f8ea70a2cf
git.kernel.orghttps://git.kernel.org/stable/c/97077ac87afe9e91ec074ef0be64454e7ccbf344

07 Fixed in

Debian 12

linux
Fixed in 6.1.190-1
linux-6.12
Fixed in 6.12.113-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.113-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.9-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.