CVE-2026-98970
N/AIn the Linux kernel, the following vulnerability has been resolved: drm/vc4: Free the BO cache size list on teardown vc4_bo_cache_destroy() purges the cached BOs but never frees the size list, leaking it on every unbind.
NO EXPLOITATION SIGNALS
No known exploitation, public exploit, or elevated probability at this time. Track for changes.
Exploitation likelihood
0.2%chance of exploitation in 30 days · 6th percentile
○ In CISA KEV
○ Catalogued PoC
Impact if exploited
—CVSS · not scored
- No impact metrics
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Data snapshot:
References and research data (JSON)
References
Advisories
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-108764 EUVD · EUVD-2026-108764
Technical & other
- https://git.kernel.org/stable/c/bf2848e50bd73782c2942ec023b5b60231f16e9bCVE record · Linux · Updated 2026-10-23T12:19:43.586Z
NVD · CVE-2026-98970 · Updated 2026-10-23T13:17:18.563 - https://git.kernel.org/stable/c/035ad1bc964f6698e9b06c26ffe94bcac08dadeaCVE record · Linux · Updated 2026-10-23T12:19:43.586Z
NVD · CVE-2026-98970 · Updated 2026-10-23T13:17:18.563 - https://git.kernel.org/stable/c/bea10b84e22efa22b005e8dba1a19df4e04a7649CVE record · Linux · Updated 2026-10-23T12:19:43.586Z
NVD · CVE-2026-98970 · Updated 2026-10-23T13:17:18.563 - https://git.kernel.org/stable/c/40870a0290cd913c9d94f98ed87ebe00dd091e53CVE record · Linux · Updated 2026-10-23T12:19:43.586Z
NVD · CVE-2026-98970 · Updated 2026-10-23T13:17:18.563 - https://git.kernel.org/stable/c/b41ff8b529278216cba22a5dcdc93fea2a3a9619CVE record · Linux · Updated 2026-10-23T12:19:43.586Z
NVD · CVE-2026-98970 · Updated 2026-10-23T13:17:18.563