CVE-2026-98970

Source
https://cve.org/CVERecord?id=CVE-2026-98970
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98970.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-98970
Downstream
Related
Published
2026-10-23T12:19:43Z
Modified
2026-11-06T17:27:17Z
Summary
drm/vc4: Free the BO cache size list on teardown
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/vc4: Free the BO cache size list on teardown

vc4_bo_cache_destroy() purges the cached BOs but never frees the size list, leaking it on every unbind.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98970.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c826a6e1064419f78855463cf29ce9e8b9d25bf4
Fixed
75f89ab8cb4c9f136af790cc5df1f88d2726953a
Fixed
2f19ddd4bf56a057dbf17e434a3c9ea45adaf7e8
Fixed
27c17ca90202d2a20def0316fb9403971ac9dfa7
Fixed
bf2848e50bd73782c2942ec023b5b60231f16e9b
Fixed
035ad1bc964f6698e9b06c26ffe94bcac08dadea
Fixed
bea10b84e22efa22b005e8dba1a19df4e04a7649
Fixed
40870a0290cd913c9d94f98ed87ebe00dd091e53
Fixed
b41ff8b529278216cba22a5dcdc93fea2a3a9619

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98970.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.5.0
Fixed
5.10.273
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.224
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.113
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.57
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.11

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98970.json"