CVE-2026-98783None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device platform_device_register_data() can fail and return an ERR_PTR, but the return value is used wit…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
In the Linux kernel, the following vulnerability has been resolved:
drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device
platform_device_register_data() can fail and return an ERR_PTR, but the return value is used without checking, leading to an invalid pointer being stored in ddp_comp[].dev and passed to component_match_add() and mtk_ddp_comp_init(), which could result in a kernel crash.
Add an IS_ERR() check to jump to the error handling path on failure.
Linux >= 0d9eee9118b77e51eeafc5bf4d008fac97035d56 < 4acac370aad2d4895a82f40b2f03e9ef70eecaa6Linux >= 0d9eee9118b77e51eeafc5bf4d008fac97035d56 < 88f8a92dcb0cb154774595dee7226458de4cbd38Linux >= 0d9eee9118b77e51eeafc5bf4d008fac97035d56 < aeef8a8537bcfb26689edb36ed905b8b2873001cLinux >= 0d9eee9118b77e51eeafc5bf4d008fac97035d56 < bce7698e2e6565bb765bd0522337f29f5f312624Linux 6.4Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-98768Noneusb: typec: anx7411 - stop the IRQ before destroying the workqueue
CVE-2026-98770Noneusb: gadget: midi2: Fix the jack descriptor array sizes
CVE-2026-98769Noneusb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd
CVE-2026-98774Nonerust_binder: cancel deferred work items in thread exit
CVE-2026-98772NoneUSB: serial: fix port tear down use-after-free
CVE-2026-98771Noneusb: storage: sierra_ms: reject short SWoC info transfers