[ CVE-2026-98970 · Published 23 Oct 2026 ]

Vulnerability in Linux

Not scored yet EPSS <1%No fix listed yet

[ Description ]Official description

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Free the BO cache size list on teardown vc4_bo_cache_destroy() purges the cached BOs but never frees the size list, leaking it on every unbind.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.