CVE-2026-89884: media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup
In the Linux kernel, the following vulnerability has been resolved:
media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup
Add the missing sanity check after looking up the SCP to avoid dereferencing a NULL-pointer in case its driver has not yet been bound.
Affected Software
Event History
Frequently Asked Questions
When can this issue be triggered?
It can occur when the mtk-mdp3 driver looks up the SCP and the SCP driver has not yet bound, causing the lookup to fail. Without the missing sanity check, the driver may dereference a NULL pointer.
What systems are exposed?
Systems running the Linux kernel with the media platform mtk-mdp3 driver are relevant. The failure condition specifically depends on the associated SCP driver not yet being bound.
What is the mitigation if an updated kernel cannot be deployed immediately?
Avoid loading or initializing the affected mtk-mdp3 driver before its required SCP driver has bound. The resolved fix adds a sanity check after the SCP lookup to prevent the NULL-pointer dereference.