CVE-2026-98970
Published Oct 23, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Free the BO cache size list on teardown vc4_bo_cache_destroy() purges the cached BOs but never frees the size list, leaking it on every unbind.
Is your site exposed to CVE-2026-98970?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/035ad1bc964f6698e9b06c26ffe94bcac08dadea
https://git.kernel.org/stable/c/40870a0290cd913c9d94f98ed87ebe00dd091e53
https://git.kernel.org/stable/c/b41ff8b529278216cba22a5dcdc93fea2a3a9619
https://git.kernel.org/stable/c/bea10b84e22efa22b005e8dba1a19df4e04a7649
https://git.kernel.org/stable/c/bf2848e50bd73782c2942ec023b5b60231f16e9b
Frequently Asked Questions
What is CVE-2026-98970? +
In the Linux kernel, the following vulnerability has been resolved:
drm/vc4: Free the BO cache size list on teardown
vc4_bo_cache_destroy() purges the cached BOs but never frees the size
list, leaking it on every unbind.
How do I check if I'm vulnerable to CVE-2026-98970? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.