In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix gem reference leak in validate_init() On the ttm_bo_reserve()… (CVE-2026-98514)

The Linux kernel's drm/nouveau driver had a reference leak vulnerability in the validate_init() function. Specifically, when ttm_bo_reserve() fails or a "vma not found" error occurs, the loop exits prematurely without adding the looked-up gem object to any validate list. Because validate_fini() only processes objects in these lists, the reference acquired by drm_gem_object_lookup() is never released, causing a resource leak. The patch addresses this by ensuring the reference is dropped before exiting the loop on these error conditions.

This vulnerability leads to a resource leak in the kernel's graphics memory management subsystem. While the description does not specify direct exploitation consequences, such leaks can degrade system stability or performance over time. No information about active exploitation or broader impact is provided.

A fix has been applied to the Linux kernel to address this gem reference leak in drm/nouveau's validate_init() function. Users should update to the patched kernel version once available. Since this is a kernel-level fix, applying official kernel updates from the vendor or distribution is the recommended remediation.