Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-98508

drm/virtio: fix NULL pointer dereference on fence allocation failure

No CVSS scoreEPSS 0.0020 · 9th percentile

Published by the CVE Program (CNA: Linux) at 18 Oct 2026, 15:17 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 70d1ace56db6c79d39dbe9c0d5244452b67e2fde to before 9571ab7493561afb4624d69572a7ebb67d76d10f git
  • affected 70d1ace56db6c79d39dbe9c0d5244452b67e2fde to before a8b83ed4a4b1d04c756f53e375e86d3881f66e72 git
  • affected 70d1ace56db6c79d39dbe9c0d5244452b67e2fde to before f2f1683955b95c9b958069da3050f7e8e129ff88 git
  • affected 70d1ace56db6c79d39dbe9c0d5244452b67e2fde to before ecced0076b700b5896e52af10d0776be8be36b0d git
  • affected 70d1ace56db6c79d39dbe9c0d5244452b67e2fde to before 846b3c64fe3e77d9db20a7e3e62dbbb637c773e1 git
  • affected 98d3e7c5f757577394f036e0301db9e570342566 git
  • affected 4037dcd70c3335600a2a95ec6229d70859bd37a1 git
  • affected 6.1.54 to before 6.2 semver
  • affected 6.5.4 to before 6.6 semver
Other versions: unaffected
Linux Linux
  • affected 6.6
  • unaffected before 6.6 semver
  • unaffected 6.6.158 to 6.6.*, inclusive semver
  • unaffected 6.12.112 to 6.12.*, inclusive semver
  • unaffected 6.18.55 to 6.18.*, inclusive semver
  • unaffected 7.2.9 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98508
CNA
Linux
Tags
Published
18 Oct 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0020, the 9th percentile, on 8 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 18 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.