{"id":"AZL-108884","summary":"CVE-2026-98606 affecting package kernel 6.6.157.1-1","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/virtio: release the GEM object on virtio_gpu_vram_create() errors\n\nvirtio_gpu_vram_create() frees the object with a bare kfree(vram) on\nboth error paths after drm_gem_private_object_init() has run, and on the\nsecond one after drm_gem_create_mmap_offset() has linked obj-\u003evma_node\ninto the device's VMA offset manager. The freed object stays in that\ninterval tree, so a later lookup or insertion walks freed memory, and\nthe dma_resv and gpuva lock are never destroyed.\n\nCall drm_gem_object_release() before kfree() on both paths.","modified":"2026-10-20T05:35:13Z","published":"2026-10-18T16:17:13Z","upstream":["CVE-2026-98606"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98606"}],"affected":[{"package":{"name":"kernel","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/kernel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.6.157.1-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-108884.json"}}],"schema_version":"1.9.0"}