CVE-2026-43207

media: mtk-mdp: Fix error handling in probe function

State: Published
Severity: 7.8 High
Published: May 6, 2026
Updated: Aug 5, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: mtk-mdp: Fix error handling in probe function

Add mtk_mdp_unregister_m2m_device() on the error handling path to prevent resource leak.

Add check for the return value of vpu_get_plat_device() to prevent null pointer dereference. And vpu_get_plat_device() increases the reference count of the returned platform device. Add platform_device_put() to prevent reference leak.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a to before 9d9c67976eda502edc6b3a148a1c5b6a18b69a98Affected c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a to before 0bc43eaf021347f8d5aba87712c36b799695eec6Affected c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a to before 9d7962d5c81d6cf3f8dbdb5c71c57600bac5772bAffected c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a to before 12cafc15d24611bfb43c82877b1bbb7454a85d5aAffected c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a to before c8737d33d4e8ffae87e5d5edac17f8a705235cc2Affected c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a to before b3fc99fe5b25613dd61c57bc70b8479adff4f60dAffected c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a to before 2e8f53a7382943411557e370f1a4f3946624a30eAffected c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a to before 8a8a3232abac5b972058a5f2cb3e33199d2a8648Affected
LinuxLinux	4.10Affected before 4.10Not affected 5.10.252 through 5.10.Not affected 5.15.202 through 5.15.Not affected 6.1.165 through 6.1.Not affected 6.6.128 through 6.6.Not affected 6.12.75 through 6.12.Not affected 6.18.16 through 6.18.Not affected 6.19.6 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a to before 9d9c67976eda502edc6b3a148a1c5b6a18b69a98Affected
c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a to before 0bc43eaf021347f8d5aba87712c36b799695eec6Affected
c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a to before 9d7962d5c81d6cf3f8dbdb5c71c57600bac5772bAffected
c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a to before 12cafc15d24611bfb43c82877b1bbb7454a85d5aAffected
c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a to before c8737d33d4e8ffae87e5d5edac17f8a705235cc2Affected
c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a to before b3fc99fe5b25613dd61c57bc70b8479adff4f60dAffected
c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a to before 2e8f53a7382943411557e370f1a4f3946624a30eAffected
c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a to before 8a8a3232abac5b972058a5f2cb3e33199d2a8648Affected

LinuxLinux

4.10Affected
before 4.10Not affected
5.10.252 through 5.10.*Not affected
5.15.202 through 5.15.*Not affected
6.1.165 through 6.1.*Not affected
6.6.128 through 6.6.*Not affected
6.12.75 through 6.12.*Not affected
6.18.16 through 6.18.*Not affected
6.19.6 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.