In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix memory leak of fence event on execbuffer failure… (CVE-2026-98509)

The Linux kernel's drm/virtio driver had a memory leak vulnerability (CVE-2026-98509) in the virtio_gpu_execbuffer_ioctl() function. When VIRTGPU_EXECBUF_RING_IDX selects a ring with polling enabled, a DRM event is reserved early in virtio_gpu_init_submit(). If later processing fails (e.g., invalid buffer object handle or sync object), the error path runs with the event pending. The cleanup function drops the out-fence without cancelling the event, freeing the fence but losing the only driver-side pointer to the event. As drm_events_release() does not free orphaned events, the allocation leaks permanently. The fix cancels and frees the DRM event on error paths and clears the fence's event pointer to avoid dangling references.

The vulnerability causes a permanent memory leak in the kernel's DRM virtio GPU driver when execbuffer operations fail. This could lead to increased memory usage and potential resource exhaustion on affected systems. There is no indication of direct code execution or privilege escalation from this flaw. No known exploits in the wild have been reported.

A fix is available that cancels and frees the DRM event on execbuffer failure paths and clears the fence's event pointer to prevent leaks. Users should update their Linux kernel to a version that includes this fix. Since this is a kernel-level issue, applying the official kernel patch or upgrading to a fixed kernel release is the recommended remediation.