CVE-2026-98970

EUVD-2026-108764
In the Linux kernel, the following vulnerability has been resolved:

drm/vc4: Free the BO cache size list on teardown

vc4_bo_cache_destroy() purges the cached BOs but never frees the size
list, leaking it on every unbind.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
vulnerable
bookworm (security)
vulnerable
forky
7.2.11-1
fixed
sid
7.2.12-1
fixed
trixie
vulnerable
trixie (security)
6.12.113-1
fixed
References
https://git.kernel.org/stable/c/035ad1bc964f6698e9b06c26ffe94bcac08dadea
https://git.kernel.org/stable/c/40870a0290cd913c9d94f98ed87ebe00dd091e53
https://git.kernel.org/stable/c/b41ff8b529278216cba22a5dcdc93fea2a3a9619
https://git.kernel.org/stable/c/bea10b84e22efa22b005e8dba1a19df4e04a7649
https://git.kernel.org/stable/c/bf2848e50bd73782c2942ec023b5b60231f16e9b