---
id: CVE-2026-98781
title: 'drm/mediatek: Fix pdev reference leak in mtk_drm_bind()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/mediatek: Fix pdev reference leak in mtk_drm_bind()

  When the device is not the mmsys master, mtk_drm_bind() returns early
  after taking a reference on the disp-mute…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1ef7ed48356cd5f9af2b7671956991b658d8c2ba <
    4a8f9cad0fced77b36b297c67c42730c9cb32ec6
  - >-
    Linux >= 1ef7ed48356cd5f9af2b7671956991b658d8c2ba <
    b84f1386d84b3a73f73ebb416a3f97c5d64a8ab3
  - >-
    Linux >= 1ef7ed48356cd5f9af2b7671956991b658d8c2ba <
    cb3e0244514d13507c6048777e1d0277e611cf6c
  - >-
    Linux >= 1ef7ed48356cd5f9af2b7671956991b658d8c2ba <
    3753e34b73fcbe2a2edbe984614a008a261697ef
  - Linux 6.4
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T15:48:18.590Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98781'
references:
  - url: 'https://git.kernel.org/stable/c/4a8f9cad0fced77b36b297c67c42730c9cb32ec6'
  - url: 'https://git.kernel.org/stable/c/b84f1386d84b3a73f73ebb416a3f97c5d64a8ab3'
  - url: 'https://git.kernel.org/stable/c/cb3e0244514d13507c6048777e1d0277e611cf6c'
  - url: 'https://git.kernel.org/stable/c/3753e34b73fcbe2a2edbe984614a008a261697ef'
tags:
  - cve.org
ingestedAt: '2026-10-18T16:47:32.489Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/mediatek: Fix pdev reference leak in mtk_drm_bind()

When the device is not the mmsys master, mtk_drm_bind() returns early
after taking a reference on the disp-mutex device via
of_find_device_by_node(), without ever dropping it: mtk_drm_unbind()
only puts mutex_dev for the master. Drop the reference before returning
from the non-master path.

## Affected

- `Linux >= 1ef7ed48356cd5f9af2b7671956991b658d8c2ba < 4a8f9cad0fced77b36b297c67c42730c9cb32ec6`
- `Linux >= 1ef7ed48356cd5f9af2b7671956991b658d8c2ba < b84f1386d84b3a73f73ebb416a3f97c5d64a8ab3`
- `Linux >= 1ef7ed48356cd5f9af2b7671956991b658d8c2ba < cb3e0244514d13507c6048777e1d0277e611cf6c`
- `Linux >= 1ef7ed48356cd5f9af2b7671956991b658d8c2ba < 3753e34b73fcbe2a2edbe984614a008a261697ef`
- `Linux 6.4`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.