{"id":"CVE-2026-68233","summary":"drm/vc4: Shut down BO cache timer before teardown","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: Shut down BO cache timer before teardown\n\nThe BO cache timer callback schedules time_work, and time_work can rearm\nthe timer through vc4_bo_cache_free_old().\n\nvc4_bo_cache_destroy() deletes the timer and then cancels the work, which\ndoes not break that cycle: the work being cancelled can rearm the timer,\nand the timer then queues work again after teardown.\n\nUse timer_shutdown_sync() instead, so the timer cannot be rearmed and the\ncycle ends with cancel_work_sync().","modified":"2026-11-01T17:28:16.530873769Z","published":"2026-08-10T12:00:57.580Z","related":["SUSE-SU-2026:24371-1","SUSE-SU-2026:24379-1","SUSE-SU-2026:24386-1","SUSE-SU-2026:24422-1","SUSE-SU-2026:24437-1","SUSE-SU-2026:24446-1","SUSE-SU-2026:4892-1","SUSE-SU-2026:4935-1","SUSE-SU-2026:4940-1","openSUSE-SU-2026:22167-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68233.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/6273dd3ffb54ec581855b82ae77331b66028249c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/948cd4876dafbfab826384516df19fe813d9f1d1"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a38f2724eb93a78ba250b01e0caf3468df4d3956"},{"type":"WEB","url":"https://git.kernel.org/stable/c/bac4c1a9af690b8635c6924872075c41d8763ed9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/cf55c6f1b62a89bf365c48bf731ccf69340e3a16"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e9264ee59bd94970b80b7548f693bccf0d4628da"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68233.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68233"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"c826a6e1064419f78855463cf29ce9e8b9d25bf4"},{"fixed":"948cd4876dafbfab826384516df19fe813d9f1d1"},{"fixed":"cf55c6f1b62a89bf365c48bf731ccf69340e3a16"},{"fixed":"e9264ee59bd94970b80b7548f693bccf0d4628da"},{"fixed":"a38f2724eb93a78ba250b01e0caf3468df4d3956"},{"fixed":"bac4c1a9af690b8635c6924872075c41d8763ed9"},{"fixed":"6273dd3ffb54ec581855b82ae77331b66028249c"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-68233.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.5.0"},{"fixed":"6.1.191"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.160"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.114"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.42"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.6"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-68233.json"}}],"schema_version":"1.9.2"}