In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix IP instance memory leak on kobject add failure… (CVE-2026-98780)

The vulnerability in the Linux kernel's drm/amdgpu component involves a memory leak triggered when kobject_add() fails during the creation of an IP hardware instance. The function amdgpu_discovery_sysfs_ips() allocates memory for ip_hw_instance and initializes its embedded kobject. If kobject_add() fails, the code previously ignored the failure and did not drop the initial kobject reference, causing the allocated ip_hw_instance to never be released. This leak occurs because the failed kobject is not added to the kset list, so the usual sysfs teardown path cannot find and free it. The patch adds a call to kobject_put() on failure to ensure proper cleanup while maintaining sysfs behavior for remaining IP entries.

The impact is a memory leak in the kernel's amdgpu driver, which could lead to increased memory usage and potential resource exhaustion over time. There is no indication of direct code execution, privilege escalation, or other critical impacts from this leak. No known exploits in the wild have been reported.

A fix has been applied in the Linux kernel to call kobject_put() when kobject_add() fails, preventing the memory leak. Users should update to a kernel version that includes this patch. Since this is a kernel-level fix, applying the official kernel update from the vendor or distribution is the recommended remediation. No additional mitigation steps are indicated.