{"id":"CVE-2026-68233","summary":"drm/vc4: Shut down BO cache timer before teardown","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: Shut down BO cache timer before teardown\n\nThe BO cache timer callback schedules time_work, and time_work can rearm\nthe timer through vc4_bo_cache_free_old().\n\nvc4_bo_cache_destroy() deletes the timer and then cancels the work, which\ndoes not break that cycle: the work being cancelled can rearm the timer,\nand the timer then queues work again after teardown.\n\nUse timer_shutdown_sync() instead, so the timer cannot be rearmed and the\ncycle ends with cancel_work_sync().","modified":"2026-08-18T03:31:15.029780169Z","published":"2026-08-10T12:00:57.580Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68233.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/6273dd3ffb54ec581855b82ae77331b66028249c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a38f2724eb93a78ba250b01e0caf3468df4d3956"},{"type":"WEB","url":"https://git.kernel.org/stable/c/bac4c1a9af690b8635c6924872075c41d8763ed9"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68233.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68233"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"c826a6e1064419f78855463cf29ce9e8b9d25bf4"},{"fixed":"a38f2724eb93a78ba250b01e0caf3468df4d3956"},{"fixed":"bac4c1a9af690b8635c6924872075c41d8763ed9"},{"fixed":"6273dd3ffb54ec581855b82ae77331b66028249c"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-68233.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.5.0"},{"fixed":"6.18.42"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.6"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-68233.json"}}],"schema_version":"1.9.0"}