Live › vulnerability › CVE-2026-98783
Go to dashboardIn the Linux kernel's MediaTek DRM driver, a platform device registration failure was not checked, so an error pointer could be stored and used. The result is a kernel crash (denial of service) on affected systems.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel with the MediaTek DRM display driver, typically MediaTek-based ARM boards and devices with that display path. Servers and desktops without MediaTek display hardware are unlikely to load this driver. The sources do not say which kernel versions are affected.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device
platform_device_register_data() can fail and return an ERR_PTR, but the return value is used without checking, leading to an invalid pointer being stored in ddp_comp[].dev and passed to component_match_add() and mtk_ddp_comp_init(), which could result in a kernel crash.
Add an IS_ERR() check to jump to the error handling path on failure.
This page as .md · .json · in your agent: get_signal("CVE-2026-98783")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.