All vulnerabilities
CVE-2026-98783

Linux: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device

Linux LinuxOperating systems
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in4acac370aad2d4895a82f40b2f03e9ef70eecaa6Also 88f8a92dcb0cb154774595dee7226458de4cbd38CVE List
Published18 Oct 2026Updated 21 Oct 2026CVE List

What fixes it

  • 4acac370aad2d4895a82f40b2f03e9ef70eecaa6LinuxCVE List
  • 88f8a92dcb0cb154774595dee7226458de4cbd38LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device

platform_device_register_data() can fail and return an ERR_PTR, but the return value is used without checking, leading to an invalid pointer being stored in ddp_comp[].dev and passed to component_match_add() and mtk_ddp_comp_init(), which could result in a kernel crash.

Add an IS_ERR() check to jump to the error handling path on failure.

Text from CVE List

Affected versions 12

  • Linuxaffected: 0d9eee9118b77e51eeafc5bf4d008fac97035d56 before f0ffb09cf1bf2a0f301f51fb45371c09dc78fcd0CVE List
  • Linuxaffected: 0d9eee9118b77e51eeafc5bf4d008fac97035d56 before 4acac370aad2d4895a82f40b2f03e9ef70eecaa6CVE List
  • Linuxaffected: 0d9eee9118b77e51eeafc5bf4d008fac97035d56 before 88f8a92dcb0cb154774595dee7226458de4cbd38CVE List
  • Linuxaffected: 0d9eee9118b77e51eeafc5bf4d008fac97035d56 before aeef8a8537bcfb26689edb36ed905b8b2873001cCVE List
  • Linuxaffected: 0d9eee9118b77e51eeafc5bf4d008fac97035d56 before bce7698e2e6565bb765bd0522337f29f5f312624CVE List
  • Linuxaffected: 6.4CVE List
  • Linuxunaffected: all versions before 6.4CVE List
  • Linuxunaffected: 6.6.160 through 6.6.*CVE List
  • Linuxunaffected: 6.12.113 through 6.12.*CVE List
  • Linuxunaffected: 6.18.56 through 6.18.*CVE List
  • Linuxunaffected: 7.2.10 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 5