In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix reference and vm_bo handling in remap() When a map overlaps… (CVE-2026-98949)

The vulnerability in the Linux kernel drm/imagination driver relates to the pvr_vm_gpuva_remap() function, which incorrectly handles splitting of GPU virtual address mappings when a new map overlaps an existing one. Specifically, it takes unnecessary GEM references that are never dropped, causing reference leaks. Additionally, the parts resulting from the split are incorrectly linked to a new vm_bo object rather than the original one, triggering warnings due to object mismatches. The issue does not address locking of GPUVA lists, which is managed separately by switching GPUVM to immediate mode.

The vulnerability causes a leak of GEM references, resulting in memory (shmem) being held after the associated resource is closed, as well as kernel warnings due to object linkage mismatches. This can lead to resource exhaustion or instability in GPU memory management within the kernel. There is no indication of remote code execution or privilege escalation from the provided data.

The vulnerability has been resolved in the Linux kernel drm/imagination driver by fixing the reference handling and correct linkage of vm_bo objects during remap operations. No additional mitigation steps are indicated. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; check the vendor or Linux kernel advisories for the official fix.