CVE-2026-98970
Fixed in a distro release EPSS <1%
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Free the BO cache size list on teardown vc4_bo_cache_destroy() purges the cached BOs but never frees the size list, leaking it on every unbind.
Products: Linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | no fix |
| Debian 13 | linux | 6.12.113-1 |
| Debian 14 | linux | 7.2.11-1 |