Live › vulnerability › CVE-2026-98970
Go to dashboardOn teardown of the vc4 DRM graphics driver, the buffer object cache is purged but its size list is never freed, so memory leaks on every driver unbind. The sources describe only a memory leak with no code execution or data exposure.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel with the vc4 DRM driver, which is used on Raspberry Pi graphics hardware. The leak only occurs when the driver is unbound, so systems that never unbind it are unlikely to notice. The sources do not say which kernel versions are affected or which are patched.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
drm/vc4: Free the BO cache size list on teardown
vc4_bo_cache_destroy() purges the cached BOs but never frees the size list, leaking it on every unbind.
This page as .md · .json · in your agent: get_signal("CVE-2026-98970")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.