AUGUST 22, 2026
Live Feed
Back to database
Case File

CVE-2026-68233

UNKNOWN · CVSS N/A EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-08-10 · Last synced 2026-08-22

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's VC4 driver, specifically in the handling of the buffer object (BO) cache timer during teardown processes. If exploited, this flaw could lead to a denial-of-service condition by allowing the timer to be rearmed even after it is intended to be shut down, potentially causing system instability. Organizations using Linux systems with the VC4 driver should prioritize addressing this issue to maintain system reliability and prevent potential disruptions.

CVE
CVE-2026-68233
Severity
UNKNOWN
CVSS
N/A
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Shut down BO cache timer before teardown The BO cache timer callback schedules time_work, and time_work can rearm the timer through vc4_bo_cache_free_old(). vc4_bo_cache_destroy() deletes the timer and then cancels the work, which does not break that cycle: the work being cancelled can rearm the timer, and the timer then queues work again after teardown. Use timer_shutdown_sync() instead, so the timer cannot be rearmed and the cycle ends with cancel_work_sync().