AZL-110792: CVE-2026-98970 affecting package kernel 6.6.157.1-1

Q: What condition triggers the memory leak?

The leak occurs each time the VC4 DRM buffer-object cache is torn down during an unbind. The teardown purges cached buffer objects but, in the affected code, does not free the associated size list.

Q: How can I tell whether this issue applies to my system?

This advisory identifies the Azure Linux kernel package version 6.6.157.1-1. Systems using the azure-linux/kernel package should compare their installed kernel package version with the version identified in the advisory.

Published Oct 23, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

drm/vc4: Free the BO cache size list on teardown

vc4bocachedestroy() purges the cached BOs but never frees the size list, leaking it on every unbind.

Affected Software

1 affected component

azure-linux/kernel<=6.6.157.1-1

Event History

Oct 23, 2026

Advisory Published

via OSV·01:17 PM

Data Sourced

via OSV·01:17 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-98970

Frequently Asked Questions

What condition triggers the memory leak?

The leak occurs each time the VC4 DRM buffer-object cache is torn down during an unbind. The teardown purges cached buffer objects but, in the affected code, does not free the associated size list.

How can I tell whether this issue applies to my system?

This advisory identifies the Azure Linux kernel package version 6.6.157.1-1. Systems using the azure-linux/kernel package should compare their installed kernel package version with the version identified in the advisory.

AZL-110792: CVE-2026-98970 affecting package kernel 6.6.157.1-1

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What condition triggers the memory leak?

How can I tell whether this issue applies to my system?

Company

Resources

Contact

Frequently Asked Questions

What condition triggers the memory leak?

How can I tell whether this issue applies to my system?