# drm/amdgpu/gfx6: fix firmware leak on teardown

CVE record · `CVE-2026-98784`

- **Identifiers:** `CVE-2026-98784`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 18 Oct 2026
- **Updated:** 30 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 18 Oct 2026, 15:48 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `2cd46ad22383ab8372b86cdb5257589496099412 to before 59bdbbb70be95100aab3a3a3f4017861c0bbef8c` (git)
  - affected: `2cd46ad22383ab8372b86cdb5257589496099412 to before 18b7d69dabb61551d3a45be6300b0e6e6b04d02c` (git)
  - affected: `2cd46ad22383ab8372b86cdb5257589496099412 to before bf3a59afc6e57957eb66ab3a86e24e2ad8b8e8d8` (git)
  - affected: `2cd46ad22383ab8372b86cdb5257589496099412 to before 2aee72150b0ea92804f0f2799efb129f10e46e8d` (git)
  - affected: `2cd46ad22383ab8372b86cdb5257589496099412 to before 3a86ebf6aa8b0a845e6188daaa6f530fe67ff00e` (git)
  - affected: `2cd46ad22383ab8372b86cdb5257589496099412 to before 652f631e2e3a8d3b11ad72dd0b8e59b5183de0d9` (git)
  - affected: `2cd46ad22383ab8372b86cdb5257589496099412 to before 4b70c6b34912ca0b4066f56fd627d785dfbfe1fa` (git)
  - affected: `2cd46ad22383ab8372b86cdb5257589496099412 to before cc172e177795c5f87bc2d71768d077e1c10633e8` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `4.9`
  - unaffected: `before 4.9` (semver)
  - unaffected: `5.10.273 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.224 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.191 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.160 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.113 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.56 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.10 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0022, the 12th percentile, on 6 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 18 Oct 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-98784](https://www.cve.org/CVERecord?id=CVE-2026-98784)
- [NVD: CVE-2026-98784](https://nvd.nist.gov/vuln/detail/CVE-2026-98784)

### References from the CNA

- <https://git.kernel.org/stable/c/59bdbbb70be95100aab3a3a3f4017861c0bbef8c>
- <https://git.kernel.org/stable/c/18b7d69dabb61551d3a45be6300b0e6e6b04d02c>
- <https://git.kernel.org/stable/c/bf3a59afc6e57957eb66ab3a86e24e2ad8b8e8d8>
- <https://git.kernel.org/stable/c/2aee72150b0ea92804f0f2799efb129f10e46e8d>
- <https://git.kernel.org/stable/c/3a86ebf6aa8b0a845e6188daaa6f530fe67ff00e>
- <https://git.kernel.org/stable/c/652f631e2e3a8d3b11ad72dd0b8e59b5183de0d9>
- <https://git.kernel.org/stable/c/4b70c6b34912ca0b4066f56fd627d785dfbfe1fa>
- <https://git.kernel.org/stable/c/cc172e177795c5f87bc2d71768d077e1c10633e8>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-98784>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-98784/>. Everything for agents: <https://agentprime.io/llms.txt>.