In the Linux kernel, the following vulnerability has been resolved:

drm/vc4: Shut down BO cache timer before teardown

The BO cache timer callback schedules time_work, and time_work can rearm
the timer through vc4_bo_cache_free_old().

vc4_bo_cache_destroy() deletes the timer and then cancels the work, which
does not break that cycle: the work being cancelled can rearm the timer,
and the timer then queues work again after teardown.

Use timer_shutdown_sync() instead, so the timer cannot be rearmed and the
cycle ends with cancel_work_sync().

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
c826a6e1064419f78855463cf29ce9e8b9d25bf4 affected < a38f2724eb93a78ba250b01e0caf3468df4d3956
c826a6e1064419f78855463cf29ce9e8b9d25bf4 affected < bac4c1a9af690b8635c6924872075c41d8763ed9
c826a6e1064419f78855463cf29ce9e8b9d25bf4 affected < 6273dd3ffb54ec581855b82ae77331b66028249c
Linux Linux affected
Version Status Constraints
4.5 affected —
0 unaffected < 4.5
6.18.42 unaffected ≤ 6.18.*
7.1.6 unaffected ≤ 7.1.*
7.2-rc5 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/6273dd3ffb54ec581855b82ae77331b66028249c cve-icon
https://git.kernel.org/stable/c/a38f2724eb93a78ba250b01e0caf3468df4d3956 cve-icon
https://git.kernel.org/stable/c/bac4c1a9af690b8635c6924872075c41d8763ed9 cve-icon
History

Mon, 10 Aug 2026 15:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-667

Mon, 10 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Shut down BO cache timer before teardown The BO cache timer callback schedules time_work, and time_work can rearm the timer through vc4_bo_cache_free_old(). vc4_bo_cache_destroy() deletes the timer and then cancels the work, which does not break that cycle: the work being cancelled can rearm the timer, and the timer then queues work again after teardown. Use timer_shutdown_sync() instead, so the timer cannot be rearmed and the cycle ends with cancel_work_sync().
Title drm/vc4: Shut down BO cache timer before teardown
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-10T12:00:57.580Z

Reserved: 2026-07-30T09:28:09.376Z

Link: CVE-2026-68233

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-10T15:00:03Z

Weaknesses