CVE-2026-98783drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device platform_device_register_data() can fail and return an ERR_PTR, but the return value is used without checking, leading to an invalid pointer being stored in ddp_comp[].dev and passed to component_match_add() and mtk_ddp_comp_init(), which could result in a kernel crash. Add an IS_ERR() check to jump to the error handling path on failure.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from 0d9eee9118b77e51eeafc5bf4d008fac97035d56 before 4acac370aad2d4895a82f40b2f03e9ef70eecaa6; from 0d9eee9118b77e51eeafc5bf4d008fac97035d56 before 88f8a92dcb0cb154774595dee7226458de4cbd38; from 0d9eee9118b77e51eeafc5bf4d008fac97035d56 before aeef8a8537bcfb26689edb36ed905b8b2873001c; from 0d9eee9118b77e51eeafc5bf4d008fac97035d56 before bce7698e2e6565bb765bd0522337f29f5f312624 | CNA record |
References
- https://git.kernel.org/stable/c/4acac370aad2d4895a82f40b2f03e9ef70eecaa6
- https://git.kernel.org/stable/c/88f8a92dcb0cb154774595dee7226458de4cbd38
- https://git.kernel.org/stable/c/aeef8a8537bcfb26689edb36ed905b8b2873001c
- https://git.kernel.org/stable/c/bce7698e2e6565bb765bd0522337f29f5f312624
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.