CVE-2026-98608

Description

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() virtio_gpu_resource_create_ioctl() calls drm_gem_object_release() on the drm_gem_handle_create() error path instead of dropping the reference it owns, so obj->funcs->free() never runs and the virtio_gpu_object, its pages and sg table, the resource id and the host-side resource are leaked. Use drm_gem_object_put() instead.

Is your site exposed to CVE-2026-98608?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0018

Probability of exploitation

0.07%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/1586ee6107acab3b14510ac6af939f1253269df8 https://git.kernel.org/stable/c/477bc3068fc3777b9d8ffd79e265b0dfdf2d3a6b https://git.kernel.org/stable/c/574ae9fa5fd3658bee23cb544fe5a0d1d750016a https://git.kernel.org/stable/c/749d8bb964b3414ef967d5ec80f2f1b5b3a510d9 https://git.kernel.org/stable/c/77dee8e9106d62bf4f51b646c801f51f8ee77339 https://git.kernel.org/stable/c/83c899104496677068fbbd2e42f28fd625f9cd85 https://git.kernel.org/stable/c/b516446a25bf365cfffe3d7884ea6637f7f70862 https://git.kernel.org/stable/c/d33d5ef8225538f76e4598c09e2074834667bb8d

Frequently Asked Questions

What is CVE-2026-98608? +

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() virtio_gpu_resource_create_ioctl() calls drm_gem_object_release() on the drm_gem_handle_create() error path instead of dropping the reference it owns, so obj->funcs->free() never runs and the virtio_gpu_object, its pages and sg table, the resource id and the host-side resource are leaked. Use drm_gem_object_put() instead.

How do I check if I'm vulnerable to CVE-2026-98608? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.