CVE record · CVE-2026-98784

drm/amdgpu/gfx6: fix firmware leak on teardown

No CVSS scoreEPSS 0.0022 · 12th percentile

Published by the CVE Program (CNA: Linux) at 18 Oct 2026, 15:48 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 2cd46ad22383ab8372b86cdb5257589496099412 to before 59bdbbb70be95100aab3a3a3f4017861c0bbef8c git
  • affected 2cd46ad22383ab8372b86cdb5257589496099412 to before 18b7d69dabb61551d3a45be6300b0e6e6b04d02c git
  • affected 2cd46ad22383ab8372b86cdb5257589496099412 to before bf3a59afc6e57957eb66ab3a86e24e2ad8b8e8d8 git
  • affected 2cd46ad22383ab8372b86cdb5257589496099412 to before 2aee72150b0ea92804f0f2799efb129f10e46e8d git
  • affected 2cd46ad22383ab8372b86cdb5257589496099412 to before 3a86ebf6aa8b0a845e6188daaa6f530fe67ff00e git
  • affected 2cd46ad22383ab8372b86cdb5257589496099412 to before 652f631e2e3a8d3b11ad72dd0b8e59b5183de0d9 git
  • affected 2cd46ad22383ab8372b86cdb5257589496099412 to before 4b70c6b34912ca0b4066f56fd627d785dfbfe1fa git
  • affected 2cd46ad22383ab8372b86cdb5257589496099412 to before cc172e177795c5f87bc2d71768d077e1c10633e8 git
Other versions: unaffected
Linux Linux
  • affected 4.9
  • unaffected before 4.9 semver
  • unaffected 5.10.273 to 5.10.*, inclusive semver
  • unaffected 5.15.224 to 5.15.*, inclusive semver
  • unaffected 6.1.191 to 6.1.*, inclusive semver
  • unaffected 6.6.160 to 6.6.*, inclusive semver
  • unaffected 6.12.113 to 6.12.*, inclusive semver
  • unaffected 6.18.56 to 6.18.*, inclusive semver
  • unaffected 7.2.10 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98784
CNA
Linux
Published
18 Oct 2026
Updated
30 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0022, the 12th percentile, on 6 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 18 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.