Live › vulnerability › CVE-2026-98998
Go to dashboardThe T-Head TH1520 HDMI bridge driver in the Linux kernel read back the wrong pointer type from platform data when the device was removed, so teardown ran on the wrong structure. The sources describe a removal-time memory-handling bug and do not state an attacker-reachable impact.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel with the th1520-dw-hdmi DRM bridge driver, typically TH1520-based boards, where the driver can be unbound or removed. Hosts without that hardware or driver are not affected.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
drm/bridge: th1520-dw-hdmi: Fix remove() callback
This driver stores struct th1520_hdmi * in platform drvdata, but th1520_dw_hdmi_remove() was reading it back as struct dw_hdmi * and passing it to dw_hdmi_remove(), so teardown runs on the wrong pointer.
Retrieve struct th1520_hdmi * from platform drvdata and pass hdmi->dw_hdmi to dw_hdmi_remove().
This page as .md · .json · in your agent: get_signal("CVE-2026-98998")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.