PT-2026-116998 · Linux · Linux

CVE-2026-98779

·

Published

2026-10-18

·

Updated

2026-10-18

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix ACP MFD device leak on init failure
acp hw init() registers ACP child devices with mfd add devices() before attaching them to the ACP power domain and initializing the hardware.
If attaching a child to the power domain fails, or if the ACP reset or clock enable operation times out, the failure path frees only the source cell, resource, and platform-data allocations. The child platform devices already registered by mfd add devices() remain registered and are never released.
Remove the children from the power domain and unregister the MFD devices on failures that occur after mfd add devices() succeeds. Keep mfd add devices() failures on the existing cleanup path since the MFD core already rolls back partially registered children itself.
The issue was identified by a static analysis tool I developed and confirmed by manual review.
(cherry picked from commit 63da68d6a2279ec945581c990c5a59a5ae8b5560)
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-98779

Affected Products

Linux