CVE-2026-98970

Description

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Free the BO cache size list on teardown vc4_bo_cache_destroy() purges the cached BOs but never frees the size list, leaking it on every unbind.

Is your site exposed to CVE-2026-98970?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0021

Probability of exploitation

0.11%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/035ad1bc964f6698e9b06c26ffe94bcac08dadea https://git.kernel.org/stable/c/40870a0290cd913c9d94f98ed87ebe00dd091e53 https://git.kernel.org/stable/c/b41ff8b529278216cba22a5dcdc93fea2a3a9619 https://git.kernel.org/stable/c/bea10b84e22efa22b005e8dba1a19df4e04a7649 https://git.kernel.org/stable/c/bf2848e50bd73782c2942ec023b5b60231f16e9b

Frequently Asked Questions

What is CVE-2026-98970? +

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Free the BO cache size list on teardown vc4_bo_cache_destroy() purges the cached BOs but never frees the size list, leaking it on every unbind.

How do I check if I'm vulnerable to CVE-2026-98970? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.