CVEvulnerability
CVE-2026-98782
- Status
- Received
- Published
- 2026-10-18
- Last modified
- 2026-10-21
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/mediatek: Fix ovl adaptor platform device leak
mtk_drm_probe() creates an OVL adaptor platform device with
platform_device_register_data() when the display pipeline requires the
OVL adaptor.
If a later initialization step fails, the probe error path releases
the DRM resources without unregistering the already registered OVL
adaptor device. The normal remove path likewise leaves the device
registered after the DRM driver is unbound.
Keep track of whether the OVL adaptor was successfully registered and
unregister it on probe failure. Also recover the platform device from
the stored DDP component device and unregister it during normal
removal.
The issue was identified by a static analysis tool I developed and
confirmed by manual review.
References
- https://git.kernel.org/stable/c/03fb1c657028cb9f189b400f3adb46e3ba676aa5 git.kernel.org
- https://git.kernel.org/stable/c/048739be3e9cacae5301b68245668002fe6f0ce5 git.kernel.org
- https://git.kernel.org/stable/c/3d85bd738aba61df14dfaf8fe638e2172d8427bf git.kernel.org
- https://git.kernel.org/stable/c/629458b7e49559593823e351535294db17331be7 git.kernel.org
- https://git.kernel.org/stable/c/8e3a350075b556f2fed4517705935bfee4529fb6 git.kernel.org