In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix bridge reference leak in nv1a_ram_new() pci_get_domain_bus_and_slot() takes a reference to the PCI device, which is never released once the memory size has been read from its config space. Drop the reference before returning.
Fix
Microsoft's update · Low
- Release Notes — azl3 kernel 6.6.157.1-1 on Azure Linux 3.0 · build 6.6.159.1-1
From the 2026-Oct release note of Microsoft's Security Update Guide, revised 2026-10-29.
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 2
- StatusReceived → PublishedNVD modified 2026-10-19 09:20
- First seenunscoredNVD modified 2026-10-19 10:19
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.
References 8
- https://git.kernel.org/stable/c/2bda86f1fb2373a2ad8900341d5d6a6d68ce6ddb
- https://git.kernel.org/stable/c/3e0861ebb9ecf0b726ea42123bd579362ec1f977
- https://git.kernel.org/stable/c/553c86816e99855d6784eebd2588d5d2198c280e
- https://git.kernel.org/stable/c/67b4411538c8341692548429d43256f25be99f7a
- https://git.kernel.org/stable/c/6d497216c10af3dc9747b399295f385fabbac9e5
- https://git.kernel.org/stable/c/9ffb43369ae51af5d5646b1ef680ab1af0fb4ad9
- https://git.kernel.org/stable/c/ac4f1d28498b9798fc20f91f23a4256032186370
- https://git.kernel.org/stable/c/add5e0a45e3971df9c65cc7b59c90559a25dc5a9