CVE-2026-98179drm/amdgpu: fix rmmio iounmap skipped on device removal
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix rmmio iounmap skipped on device removal amdgpu_pci_remove() calls drm_dev_unplug() before fini_sw(), so drm_dev_enter() is already false there and the iounmap() guarded by it is skipped. This .remove path runs on both hot-unplug and plain rmmod, so the register BAR ioremap mapping leaks one instance per unload. Unmap rmmio unconditionally (guard only on non-NULL) and drop the now unused idx. (cherry picked from commit dd6f86a97260e5207d3329ad03aa89fdad61b1e6)
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 62d5f9f7110ad374db67ab4820f4ff2d916c3cdb before e81502d6791df9ecd003bfb2ca44f0d1f1b38439; from 62d5f9f7110ad374db67ab4820f4ff2d916c3cdb before cd55dde2b63789a3dafe982c89844f537501d096; from 62d5f9f7110ad374db67ab4820f4ff2d916c3cdb before a645584c3ccc493ee835f77155829442bd7578c3; from 62d5f9f7110ad374db67ab4820f4ff2d916c3cdb before 5155002b03b24ba3ef91c5c313b8cf0171b24904 | CNA record |
References
- https://git.kernel.org/stable/c/e81502d6791df9ecd003bfb2ca44f0d1f1b38439
- https://git.kernel.org/stable/c/cd55dde2b63789a3dafe982c89844f537501d096
- https://git.kernel.org/stable/c/a645584c3ccc493ee835f77155829442bd7578c3
- https://git.kernel.org/stable/c/5155002b03b24ba3ef91c5c313b8cf0171b24904
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.