[ CVE-2026-98970 · Published 23 Oct 2026 ]
Vulnerability in Linux
Not scored yet
EPSS <1%No fix listed yet
[ Description ]Official description
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Free the BO cache size list on teardown vc4_bo_cache_destroy() purges the cached BOs but never frees the size list, leaking it on every unbind.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.
[ References ]References
- git.kernel.org/stable/c/035ad1bc964f6698e9b06c26ffe94bcac08dadea
- git.kernel.org/stable/c/40870a0290cd913c9d94f98ed87ebe00dd091e53
- git.kernel.org/stable/c/b41ff8b529278216cba22a5dcdc93fea2a3a9619
- git.kernel.org/stable/c/bea10b84e22efa22b005e8dba1a19df4e04a7649
- git.kernel.org/stable/c/bf2848e50bd73782c2942ec023b5b60231f16e9b