CVE-2026-98970
drm/vc4: Free the BO cache size list on teardown
CVSS v3.1 (listed by NVD)
—
Not scored
CVSS v4.0 (listed by NVD)
—
Not scored
CVSS (listed by CVE.org)
—
Not scored
EPSS exploit probability
0.2%
Percentile 10.5%
as of 2026-10-24
CISA KEV
—
Not listed
Description
NVD
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Free the BO cache size list on teardown vc4_bo_cache_destroy() purges the cached BOs but never frees the size list, leaking it on every unbind.
Affected products and packages
CNA (CVE.org)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | affected: c826a6e1064419f78855463cf29ce9e8b9d25bf4 … < bf2848e50bd73782c2942ec023b5b60231f16e9b affected: c826a6e1064419f78855463cf29ce9e8b9d25bf4 … < 035ad1bc964f6698e9b06c26ffe94bcac08dadea affected: c826a6e1064419f78855463cf29ce9e8b9d25bf4 … < bea10b84e22efa22b005e8dba1a19df4e04a7649 affected: c826a6e1064419f78855463cf29ce9e8b9d25bf4 … < 40870a0290cd913c9d94f98ed87ebe00dd091e53 affected: c826a6e1064419f78855463cf29ce9e8b9d25bf4 … < b41ff8b529278216cba22a5dcdc93fea2a3a9619 default: unaffected |
| Linux | Linux | affected: 4.5 unaffected: 0 … < 4.5 unaffected: 6.6.160 … <= 6.6.* unaffected: 6.12.113 … <= 6.12.* unaffected: 6.18.57 … <= 6.18.* unaffected: 7.2.11 … <= 7.2.* unaffected: 7.3 … <= * default: affected |
Open-source packages (GitHub Advisory / OSV)
CVE-2026-98970
OSV
drm/vc4: Free the BO cache size list on teardown
| Ecosystem | Package | Affected versions | Fixed in |
|---|---|---|---|
| >= c826a6e1064419f78855463cf29ce9e8b9d25bf4, < bf2848e50bd73782c2942ec023b5b60231f16e9b; < 035ad1bc964f6698e9b06c26ffe94bcac08dadea; < bea10b84e22efa22b005e8dba1a19df4e04a7649; < 40870a0290cd913c9d94f98ed87ebe00dd091e53; < b41ff8b529278216cba22a5dcdc93fea2a3a9619 | bf2848e50bd73782c2942ec023b5b60231f16e9b, 035ad1bc964f6698e9b06c26ffe94bcac08dadea, bea10b84e22efa22b005e8dba1a19df4e04a7649, 40870a0290cd913c9d94f98ed87ebe00dd091e53, b41ff8b529278216cba22a5dcdc93fea2a3a9619 | ||
| Linux | Kernel | >= 4.5.0, < 6.6.160; >= 6.7.0, < 6.12.113; >= 6.13.0, < 6.18.57; >= 6.19.0, < 7.2.11 | 6.6.160, 6.12.113, 6.18.57, 7.2.11 |
Linux distribution status
References (8)
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git OSV
- https://git.kernel.org/stable/c/035ad1bc964f6698e9b06c26ffe94bcac08dadea NVD, CNA, OSV
- https://git.kernel.org/stable/c/40870a0290cd913c9d94f98ed87ebe00dd091e53 NVD, CNA, OSV
- https://git.kernel.org/stable/c/b41ff8b529278216cba22a5dcdc93fea2a3a9619 NVD, CNA, OSV
- https://git.kernel.org/stable/c/bea10b84e22efa22b005e8dba1a19df4e04a7649 NVD, CNA, OSV
- https://git.kernel.org/stable/c/bf2848e50bd73782c2942ec023b5b60231f16e9b NVD, CNA, OSV
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98970.json OSV
- https://nvd.nist.gov/vuln/detail/CVE-2026-98970 OSV