CVE-2026-98782: drm/mediatek: Fix ovl adaptor platform device leak

Published Oct 18, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

drm/mediatek: Fix ovl adaptor platform device leak

mtkdrmprobe() creates an OVL adaptor platform device with platformdeviceregisterdata() when the display pipeline requires the OVL adaptor.

If a later initialization step fails, the probe error path releases the DRM resources without unregistering the already registered OVL adaptor device. The normal remove path likewise leaves the device registered after the DRM driver is unbound.

Keep track of whether the OVL adaptor was successfully registered and unregister it on probe failure. Also recover the platform device from the stored DDP component device and unregister it during normal removal.

The issue was identified by a static analysis tool I developed and confirmed by manual review.

Affected Software

1 affected component

Linux Linux kernel

Event History

Oct 18, 2026

CVE Published

via MITRE·03:48 PM

Data Sourced

via MITRE·03:48 PM

Description

Data Sourced

via NVD·04:17 PM

Description

Frequently Asked Questions

Which systems are affected by this lifecycle issue?

It applies to MediaTek DRM display pipelines that require the OVL adaptor platform device. The stale device can be left behind when a later DRM probe initialization step fails or when the DRM driver is normally removed.

What condition causes the leaked device to remain registered?

The OVL adaptor must have been successfully registered before a subsequent initialization failure occurs. It is also left registered when the DRM driver is unbound because the prior remove path did not unregister it.

What should be done if the driver cannot be updated immediately?

Avoid unbinding or removing the affected DRM driver where practical, since the normal removal path is one trigger for leaving the adaptor device registered. Recovery requires unregistering the previously registered OVL adaptor platform device; the provided fixes add this cleanup for both probe failures and normal removal.

CVE-2026-98782: drm/mediatek: Fix ovl adaptor platform device leak

Affected Software

Event History

Frequently Asked Questions

Which systems are affected by this lifecycle issue?

What condition causes the leaked device to remain registered?

What should be done if the driver cannot be updated immediately?

Company

Resources

Contact

Frequently Asked Questions

Which systems are affected by this lifecycle issue?

What condition causes the leaked device to remain registered?

What should be done if the driver cannot be updated immediately?