All vulnerabilities
CVE-2026-98781

Linux: drm/mediatek: Fix pdev reference leak in mtk_drm_bind()

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in4a0ae61067671f556eeaf5ea4e59a1db63163d70Also 4a8f9cad0fced77b36b297c67c42730c9cb32ec6, 3753e34b73fcbe2a2edbe984614a008a261697efCVE List
Published18 Oct 2026Updated 21 Oct 2026CVE List

What fixes it

  • 4a0ae61067671f556eeaf5ea4e59a1db63163d70LinuxCVE List
  • 4a8f9cad0fced77b36b297c67c42730c9cb32ec6LinuxCVE List
  • 3753e34b73fcbe2a2edbe984614a008a261697efLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/mediatek: Fix pdev reference leak in mtk_drm_bind()

When the device is not the mmsys master, mtk_drm_bind() returns early after taking a reference on the disp-mutex device via of_find_device_by_node(), without ever dropping it: mtk_drm_unbind() only puts mutex_dev for the master. Drop the reference before returning from the non-master path.

Text from CVE List

Affected versions 12

  • Linuxaffected: 1ef7ed48356cd5f9af2b7671956991b658d8c2ba before 4a0ae61067671f556eeaf5ea4e59a1db63163d70CVE List
  • Linuxaffected: 1ef7ed48356cd5f9af2b7671956991b658d8c2ba before 4a8f9cad0fced77b36b297c67c42730c9cb32ec6CVE List
  • Linuxaffected: 1ef7ed48356cd5f9af2b7671956991b658d8c2ba before b84f1386d84b3a73f73ebb416a3f97c5d64a8ab3CVE List
  • Linuxaffected: 1ef7ed48356cd5f9af2b7671956991b658d8c2ba before cb3e0244514d13507c6048777e1d0277e611cf6cCVE List
  • Linuxaffected: 1ef7ed48356cd5f9af2b7671956991b658d8c2ba before 3753e34b73fcbe2a2edbe984614a008a261697efCVE List
  • Linuxaffected: 6.4CVE List
  • Linuxunaffected: all versions before 6.4CVE List
  • Linuxunaffected: 6.6.160 through 6.6.*CVE List
  • Linuxunaffected: 6.12.113 through 6.12.*CVE List
  • Linuxunaffected: 6.18.56 through 6.18.*CVE List
  • Linuxunaffected: 7.2.10 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 5