InfoSec Signals™
Sign InStart Free
Back to CVE records
Not yet scoredPublished Oct 23, 2026

CVE-2026-98970drm/vc4: Free the BO cache size list on teardown

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Free the BO cache size list on teardown vc4_bo_cache_destroy() purges the cached BOs but never frees the size list, leaking it on every unbind.

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Received
Record last updated
Oct 23, 2026
First seen by InfoSec Signals
Oct 23, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from c826a6e1064419f78855463cf29ce9e8b9d25bf4 before bf2848e50bd73782c2942ec023b5b60231f16e9b; from c826a6e1064419f78855463cf29ce9e8b9d25bf4 before 035ad1bc964f6698e9b06c26ffe94bcac08dadea; from c826a6e1064419f78855463cf29ce9e8b9d25bf4 before bea10b84e22efa22b005e8dba1a19df4e04a7649; from c826a6e1064419f78855463cf29ce9e8b9d25bf4 before 40870a0290cd913c9d94f98ed87ebe00dd091e53; from c826a6e1064419f78855463cf29ce9e8b9d25bf4 before b41ff8b529278216cba22a5dcdc93fea2a3a9619
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.