CVE-2026-98970

Not scored yetLast modified Oct 23, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/vc4: Free the BO cache size list on teardown

vc4_bo_cache_destroy() purges the cached BOs but never frees the size list, leaking it on every unbind.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 23, 2026
Last modified
Oct 23, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-98971In the Linux kernel, the following vulnerability has been resolved: gpio: exar: initialize the ID before registering its cleanup devm_add_CVE-2026-98972In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() CVE-2026-98973In the Linux kernel, the following vulnerability has been resolved: drm/bridge: Fix unlocked list_del in drm_bridge_add() When re-adding aCVE-2026-989747.8In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range-to-eof file size exchange Norbert Szetei posteCVE-2026-989757.8In the Linux kernel, the following vulnerability has been resolved: xfs: stop exchanging reflink flags when exchanging mappings When an exCVE-2026-989767.8In the Linux kernel, the following vulnerability has been resolved: namespace: keep the lock on a mount that a propagated copy is moved benCVE-2026-98977In the Linux kernel, the following vulnerability has been resolved: namespace: handle mount locking for automounts correctly If mounts areCVE-2026-989788.4In the Linux kernel, the following vulnerability has been resolved: namespace: never expire a locked mount Locked mounts are special. TheyCVE-2026-98979In the Linux kernel, the following vulnerability has been resolved: namespace: refuse an automount below a mount that is in no namespace ICVE-2026-98988.3Insufficient validation of untrusted input in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compCVE-2026-989808.8In the Linux kernel, the following vulnerability has been resolved: namei: don't reveal overmounted entries in refwalk In rcuwalk the dentCVE-2026-989818.8In the Linux kernel, the following vulnerability has been resolved: namespace: unhash a dentry before detaching the mounts on it unlink(),
CVE-2026-98970: Unscored | Vulnix