CVE-2026-98179: Linux kernel · drm/amdgpu: fix rmmio iounmap skipped on device removal
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in e81502d6791df9ecd003bfb2ca44f0d1f1b38439 : update Linux kernel when convenient.
Data as of 26 Oct 2026, 17:16 UTC
Rated Low by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 6% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in e81502d6791df9ecd003bfb2ca44f0d1f1b38439, cd55dde2b63789a3dafe982c89844f537501d096, a645584c3ccc493ee835f77155829442bd7578c3 +1
Exploitation evidence
Disclosed: evidence found.
CVE published 6 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to e81502d6791df9ecd003bfb2ca44f0d1f1b38439, cd55dde2b63789a3dafe982c89844f537501d096, a645584c3ccc493ee835f77155829442bd7578c3 or 5155002b03b24ba3ef91c5c313b8cf0171b24904.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
Apply the official Linux kernel patches that include the fix commits referenced. The vulnerability is fixed in the specified commits. Users running affected versions, such as Linux kernel 5.17, should upgrade to a fixed kernel version containing these commits to remediate the issue.
Description
A vulnerability in the Linux kernel's AMDGPU driver causes a memory leak due to skipped unmapping of register BAR ioremap mappings during device removal. This occurs because drm_dev_unplug() is called before fini_sw(), causing the iounmap() call to be skipped. The issue affects Linux kernel version 5.17 and has been fixed in subsequent commits.
References
- git.kernel.org/stable/c/e81502d6791df9ecd003bfb2ca44f0d1f1b38439 (opens in a new tab)
- git.kernel.org/stable/c/cd55dde2b63789a3dafe982c89844f537501d096 (opens in a new tab)
- git.kernel.org/stable/c/a645584c3ccc493ee835f77155829442bd7578c3 (opens in a new tab)
- git.kernel.org/stable/c/5155002b03b24ba3ef91c5c313b8cf0171b24904 (opens in a new tab)