CVE-2026-68233

In the Linux kernel DRM/VC4 subsystem, CVE-2026-68233 addresses a use-after-free-like race where a timer callback (BO cache timer) can be rearmed by time_work during teardown. vc4_bo_cache_destroy() deletes the timer and cancels the work, but the cancelled work can rearm the timer and queue work ...