CVE-2026-98309

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the VideoCore IV (vc4) display driver where background polling tasks are not properly finalized when the driver is unbound. A local user could exploit this flaw by unbinding the device or unloading the driver module, causing background routines to access memory after it has been freed. This issue can lead to a system crash, resulting in a Denial of Service (DoS), or potentially allow arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.