Memory leak in Linux kernel - CVE-2026-98780
Published: October 22, 2026
Vulnerability details
The vulnerability allows a local user to consume kernel memory and potentially cause a denial of service.
The vulnerability exists due to a memory leak in amdgpu_discovery_sysfs_ips() when kobject_add() fails during IP instance registration. A local user can potentially trigger this failure path to leave ip_hw_instance allocations unreleased because the initial kobject reference is not dropped and normal sysfs teardown cannot find the failed object. Repeated failures may exhaust kernel memory and cause a denial of service.
Affected software
SUSE Linux Micro
SUSE Linux Micro Extras
kernel-default
kernel-64kb
kernel-64kb-debugsource
kernel-64kb-devel
kernel-default-devel
kernel-syms
kernel-obs-build
kernel-obs-build-debugsource
kernel-default-debugsource
kernel-default-devel-debuginfo
How to mitigate CVE-2026-98780
kernel-default - update to 6.4.0-159998.55.1
kernel-64kb - update to 6.4.0-159998.55.1
kernel-64kb-debugsource - update to 6.4.0-159998.55.1
kernel-64kb-devel - update to 6.4.0-159998.55.1
kernel-default-devel - update to 6.4.0-159998.55.1
kernel-syms - update to 6.4.0-159998.55.1
kernel-obs-build - update to 6.4.0-159998.55.1
kernel-obs-build-debugsource - update to 6.4.0-159998.55.1
kernel-default-debugsource - update to 6.4.0-159998.55.1
kernel-default-devel-debuginfo - update to 6.4.0-159998.55.1
External References
- https://git.kernel.org/stable/c/0563b26c1437fe7e25ea42c334eb85c0a703f8ff
- https://git.kernel.org/stable/c/7ca44cb14d0249992a8f1425ba004d6e2d16d255
- https://git.kernel.org/stable/c/c05bbcc263d67b8b158e2a52be7e3005895969d1
- https://git.kernel.org/stable/c/f5a5add3605935163dd0f75749b6a7869e9765af
- https://git.kernel.org/stable/c/f6364e7284a131556f5d763d867147bece2843a8