{"id":"CVE-2026-98783","kind":"vulnerability","aliases":["CVE-2026-98783"],"related":[],"title":"Linux kernel: MediaTek display driver crashes on failed platform device registration","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device\n\nplatform_device_register_data() can fail and return an ERR_PTR, but the\nreturn value is used without checking, leading to an invalid pointer\nbeing stored in ddp_comp[].dev and passed to component_match_add() and\nmtk_ddp_comp_init(), which could result in a kernel crash.\n\nAdd an IS_ERR() check to jump to the error handling path on failure.","summary":"In the Linux kernel's MediaTek DRM driver, a platform device registration failure was not checked, so an error pointer could be stored and used. The result is a kernel crash (denial of service) on affected systems.","severity":"low","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["arm","embedded","infrastructure","linux-kernel","mediatek"],"not_affected_if":["no-mediatek-display-hardware"],"how_to_check":"- unknown","fix":"- Update the Linux kernel to a release that includes the upstream fix adding the IS_ERR check in drm/mediatek ovl_adaptor (version unknown from sources)","status":"open","published_at":"2026-10-18T16:17:32+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","triaged_at":"2026-10-25T05:15:21+00:00","updated_at":"2026-10-25T05:15:21+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-25T05:15:21Z","model":"claude-haiku-5-5","output":{"fix":"- Update the Linux kernel to a release that includes the upstream fix adding the IS_ERR check in drm/mediatek ovl_adaptor (version unknown from sources)","reach":"local","title":"Linux kernel: MediaTek display driver crashes on failed platform device registration","impact":"low","summary":"In the Linux kernel's MediaTek DRM driver, a platform device registration failure was not checked, so an error pointer could be stored and used. The result is a kernel crash (denial of service) on affected systems.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","arm","mediatek","embedded"],"confidence":0.6,"needs_auth":"unknown","worst_case":"kernel crash on a system with MediaTek display hardware","analyst_note":"","how_to_check":"- unknown","needs_analyst":false,"not_affected_if":["no-mediatek-display-hardware"],"who_is_affected":"Systems running a Linux kernel with the MediaTek DRM display driver, typically MediaTek-based ARM boards and devices with that display path. Servers and desktops without MediaTek display hardware are unlikely to load this driver. The sources do not say which kernel versions are affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000567,"input_tokens":3391,"output_tokens":456,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-98783':14A,17A 'adaptor':80C 'add':73C,118C,131C 'affect':60B 'arm':18B 'check':40B,77C,101C,135C 'comp':111C,122C 'compon':116C 'could':45B,125C 'crash':6A,55B,130C 'cve':12A,15A 'data':86C 'ddp':110C,121C 'denial':56B 'dev':112C 'devic':10A,35B,82C,84C 'display':4A 'driver':5A,32B 'drm':31B 'drm/mediatek':72C 'embed':19B 'err':76C,92C,134C 'error':43B,140C 'fail':8A,88C 'failur':37B,144C 'follow':67C 'handl':141C 'infrastructur':20B 'init':123C 'invalid':105C 'jump':137C 'kernel':2A,23B,28B,54B,65C,129C 'lead':102C 'linux':1A,22B,27B,64C 'linux-kernel':21B 'match':117C 'mediatek':3A,24B,30B 'miss':74C 'mtk':120C 'ovl':79C 'pass':114C 'path':142C 'platform':9A,34B,81C,83C 'pointer':44B,106C 'ptr':93C 'regist':85C 'registr':11A,36B 'resolv':71C 'result':51B,126C 'return':90C,96C 'servic':58B 'store':47B,108C 'system':61B 'use':49B,99C 'valu':97C 'vulner':68C 'without':100C","nicknames":[],"mitigations":[],"who_affected":"Systems running a Linux kernel with the MediaTek DRM display driver, typically MediaTek-based ARM boards and devices with that display path. Servers and desktops without MediaTek display hardware are unlikely to load this driver. The sources do not say which kernel versions are affected.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:32+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98783","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98783","severity":null,"published_at":"2026-10-18T16:17:32+00:00","modified_at":"2026-10-21T13:21:46+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}