All vulnerabilities
CVE-2026-98998

Linux: drm/bridge: th1520-dw-hdmi: Fix remove() callback

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in01c83795d50ccdb441f60e89ff50767cb2f6045aFixed versionCVE List
Published23 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

  • 01c83795d50ccdb441f60e89ff50767cb2f6045aLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/bridge: th1520-dw-hdmi: Fix remove() callback

This driver stores struct th1520_hdmi * in platform drvdata, but th1520_dw_hdmi_remove() was reading it back as struct dw_hdmi * and passing it to dw_hdmi_remove(), so teardown runs on the wrong pointer.

Retrieve struct th1520_hdmi * from platform drvdata and pass hdmi->dw_hdmi to dw_hdmi_remove().

Text from CVE List

Affected versions 6

  • Linuxaffected: 96f30ee0fb9db1663eb8fd55c12e4c67da8c4a90 before d7cd43c2f546170ed42b2498d13805f4f89193c1CVE List
  • Linuxaffected: 96f30ee0fb9db1663eb8fd55c12e4c67da8c4a90 before 01c83795d50ccdb441f60e89ff50767cb2f6045aCVE List
  • Linuxaffected: 7.1CVE List
  • Linuxunaffected: all versions before 7.1CVE List
  • Linuxunaffected: 7.2.11 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 2