CVE-2026-98783
Linux: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device
CVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in4acac370aad2d4895a82f40b2f03e9ef70eecaa6Also 88f8a92dcb0cb154774595dee7226458de4cbd38CVE List
What fixes it
- 4acac370aad2d4895a82f40b2f03e9ef70eecaa6LinuxCVE List
- 88f8a92dcb0cb154774595dee7226458de4cbd38LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device
platform_device_register_data() can fail and return an ERR_PTR, but the return value is used without checking, leading to an invalid pointer being stored in ddp_comp[].dev and passed to component_match_add() and mtk_ddp_comp_init(), which could result in a kernel crash.
Add an IS_ERR() check to jump to the error handling path on failure.
Text from CVE List
Affected versions 12
- Linuxaffected: 0d9eee9118b77e51eeafc5bf4d008fac97035d56 before f0ffb09cf1bf2a0f301f51fb45371c09dc78fcd0CVE List
- Linuxaffected: 0d9eee9118b77e51eeafc5bf4d008fac97035d56 before 4acac370aad2d4895a82f40b2f03e9ef70eecaa6CVE List
- Linuxaffected: 0d9eee9118b77e51eeafc5bf4d008fac97035d56 before 88f8a92dcb0cb154774595dee7226458de4cbd38CVE List
- Linuxaffected: 0d9eee9118b77e51eeafc5bf4d008fac97035d56 before aeef8a8537bcfb26689edb36ed905b8b2873001cCVE List
- Linuxaffected: 0d9eee9118b77e51eeafc5bf4d008fac97035d56 before bce7698e2e6565bb765bd0522337f29f5f312624CVE List
- Linuxaffected: 6.4CVE List
- Linuxunaffected: all versions before 6.4CVE List
- Linuxunaffected: 6.6.160 through 6.6.*CVE List
- Linuxunaffected: 6.12.113 through 6.12.*CVE List
- Linuxunaffected: 6.18.56 through 6.18.*CVE List
- Linuxunaffected: 7.2.10 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List
References 5
- git.kernel.org/stable/c/f0ffb09cf1bf2a0f301f51fb45371c09dc78fcd0Referencevia CVE List
- git.kernel.org/stable/c/4acac370aad2d4895a82f40b2f03e9ef70eecaa6Referencevia CVE List
- git.kernel.org/stable/c/88f8a92dcb0cb154774595dee7226458de4cbd38Referencevia CVE List
- git.kernel.org/stable/c/aeef8a8537bcfb26689edb36ed905b8b2873001cReferencevia CVE List
- git.kernel.org/stable/c/bce7698e2e6565bb765bd0522337f29f5f312624Referencevia CVE List