{"id":"CVE-2026-89884","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: platform: mtk-mdp3: fix NULL deref on failed SCP lookup\n\nAdd the missing sanity check after looking up the SCP to avoid\ndereferencing a NULL-pointer in case its …","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: platform: mtk-mdp3: fix NULL deref on failed SCP lookup\n\nAdd the missing sanity check after looking up the SCP to avoid\ndereferencing a NULL-pointer in case its …","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 61890ccaefaff89f5babd2c8412fd222c3f5fe38 < 28548387d79d14c975e77787ebd1f051265e1396","Linux >= 61890ccaefaff89f5babd2c8412fd222c3f5fe38 < 5026f927ef4150ba12da6f1098cf7952d77b14b6","Linux >= 61890ccaefaff89f5babd2c8412fd222c3f5fe38 < 426ead7eed6d6b3c3f0fe0925c112ef73fc87256","Linux >= 61890ccaefaff89f5babd2c8412fd222c3f5fe38 < 90368323fb244da0504e3da37a182f8e89bcc3b9","Linux 6.1"],"published":"2026-09-16","updated":"2026-09-16","sourceUpdated":"2026-09-16T11:16:56.877","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-89884","references":[{"url":"https://git.kernel.org/stable/c/28548387d79d14c975e77787ebd1f051265e1396","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/426ead7eed6d6b3c3f0fe0925c112ef73fc87256","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/5026f927ef4150ba12da6f1098cf7952d77b14b6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/90368323fb244da0504e3da37a182f8e89bcc3b9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-16T10:53:53.985Z","epss":0.002,"epssPercentile":0.10103,"slug":"CVE-2026-89884","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmedia: platform: mtk-mdp3: fix NULL deref on failed SCP lookup\n\nAdd the missing sanity check after looking up the SCP to avoid\ndereferencing a NULL-pointer in case its driver has not yet been bound.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}