Live › vulnerability › CVE-2026-98782
Go to dashboardThe MediaTek DRM driver registers an OVL adaptor platform device during probe but does not unregister it on probe failure or on normal driver removal. The sources describe a resource leak; they do not describe an attacker gaining access or control.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
drm/mediatek: Fix ovl adaptor platform device leak
mtk_drm_probe() creates an OVL adaptor platform device with platform_device_register_data() when the display pipeline requires the OVL adaptor.
If a later initialization step fails, the probe error path releases the DRM resources without unregistering the already registered OVL adaptor device. The normal remove path likewise leaves the device registered after the DRM driver is unbound.
Keep track of whether the OVL adaptor was successfully registered and unregister it on probe failure. Also recover the platform device from the stored DDP component device and unregister it during normal removal.
The issue was identified by a static analysis tool I developed and confirmed by manual review.
This page as .md · .json · in your agent: get_signal("CVE-2026-98782")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.