Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-98970

Fixed in a distro release EPSS <1%

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Free the BO cache size list on teardown vc4_bo_cache_destroy() purges the cached BOs but never frees the size list, leaking it on every unbind.

Published 2026-10-23 · CVE record · OSV

Products: Linux

Distro releases

ReleasePackageFixed in
Debian 12linuxno fix
Debian 13linux6.12.113-1
Debian 14linux7.2.11-1