CVE-2026-98783: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device
drm/mediatek: Add missing ISERR check for ovladaptor platform device
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.6.160 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.113 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.18.56 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 7.2.10 - Upgrade
Upgrade
azurelinux/kernelto a version that resolves this vulnerability.Fixed in 6.6.161.1-1 - Compensating control
Add an IS_ERR() check for the return value of platform_device_register_data() and jump to the error-handling path on failure before using the platform device pointer.
Event History
Frequently Asked Questions
What condition is required to trigger the crash?
The failure path requires platform_device_register_data() to fail. Without the added IS_ERR() check, its error pointer can be stored and later passed to component_match_add() and mtk_ddp_comp_init(), potentially causing a kernel crash.
What is the impact described for affected systems?
The described impact is a kernel crash caused by use of an invalid pointer after platform-device registration fails.