CVE-2026-80658drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove() Attempting to access driver data in the platform driver ->remove() callback may lead to a null pointer dereference since there is no guaranty that the component ->bind() callback invoking platform_set_drvdata() was executed. A common scenario is when Rockchip DRM driver didn't manage to run component_bind_all() because of an (unrelated) error causing early return from rockchip_drm_bind(). Drop the unnecessary call to platform_get_drvdata() and, instead, reference the target device structure via platform_device.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 28, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from d68ba7bac9555d05e2f5b310c898b2a5c7eff174 before b3ec263a719e0d499bd95d20012d90d7e8641655; from d68ba7bac9555d05e2f5b310c898b2a5c7eff174 before 33bc9fba3ae05863fabe3436ddca2ca4f4939c5e; from d68ba7bac9555d05e2f5b310c898b2a5c7eff174 before 9456381d8b60bb7dd42f2f04afe5ee4ce6e0bc12 | CNA record |
References
- https://git.kernel.org/stable/c/b3ec263a719e0d499bd95d20012d90d7e8641655
- https://git.kernel.org/stable/c/33bc9fba3ae05863fabe3436ddca2ca4f4939c5e
- https://git.kernel.org/stable/c/9456381d8b60bb7dd42f2f04afe5ee4ce6e0bc12
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.