In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()… (CVE-2026-98511)

The vulnerability in the Linux kernel's nouveau DRM driver arises from nouveau_bo_pin_locked() incorrectly incrementing the pin count on a failed re-pin attempt when memory domains are incompatible. The function sets an error code (-EBUSY) but still calls ttm_bo_pin(), causing the pin count to increase without a corresponding unpin. This leads to a warning in ttm_bo_release() due to an unexpected pin count state. The issue was identified via fuzzing with a modified Syzkaller tool and has been resolved in the kernel.

The impact is limited to kernel warnings triggered by inconsistent pin count management in the nouveau DRM driver. This could potentially lead to resource management anomalies within the graphics subsystem but does not indicate direct exploitation or system compromise based on the provided data.

A fix has been applied to the Linux kernel to correct the pin count handling in nouveau_bo_pin_locked(). Users should update to a kernel version that includes this fix. Since this is a kernel-level fix, applying the official kernel update is the recommended remediation.