Skip to main content
CVE-2026-98509VulnerabilityPublished Updated

Microsoft · drm/virtio: fix memory leak of fence event on execbuffer failure

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-98509· Medium

Not known to be exploited · fixed in b74aad23d99b279bb34d135795f39a6d8ecdc075 : update Microsoft when convenient.

Data as of 2 Nov 2026, 10:58 UTC

Severity
Medium

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS
0.2% chance of exploitation in 30 days – higher than 9% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in b74aad23d99b279bb34d135795f39a6d8ecdc075, ae583668f16d41fcc1b54f45848c1b6ac1d6669a, 43bfe2b60c149bf6effda25f245a00509061fa15 +2

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 18 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ cd7f5ca33585918febe5e2f6dc090a21cfa775b0, < b74aad23d99b279bb34d135795f39a6d8ecdc075
Fixed in
  • b74aad23d99b279bb34d135795f39a6d8ecdc075
LinuxLinuxAffected
  • ≥ cd7f5ca33585918febe5e2f6dc090a21cfa775b0, < ae583668f16d41fcc1b54f45848c1b6ac1d6669a
Fixed in
  • ae583668f16d41fcc1b54f45848c1b6ac1d6669a
LinuxLinuxAffected
  • ≥ cd7f5ca33585918febe5e2f6dc090a21cfa775b0, < 43bfe2b60c149bf6effda25f245a00509061fa15
Fixed in
  • 43bfe2b60c149bf6effda25f245a00509061fa15
LinuxLinuxAffected
  • ≥ cd7f5ca33585918febe5e2f6dc090a21cfa775b0, < 8fa78900fd24247277c03dc7b8a2864cb12d4340
Fixed in
  • 8fa78900fd24247277c03dc7b8a2864cb12d4340
LinuxLinuxAffected
  • ≥ cd7f5ca33585918febe5e2f6dc090a21cfa775b0, < 4e333e2336138f4659b1d7a0371c499f80428612
Fixed in
  • 4e333e2336138f4659b1d7a0371c499f80428612
LinuxLinuxAffected
  • =5.16
Fixed in–

Description

This vulnerability involves a memory leak in the drm/virtio component related to fence event handling on execbuffer failure. It affects specific versions 3.0 and 4.0 of the Microsoft product. No CVSS score or detailed impact information is provided.

References

Community reviews

Loading reviews…