Riskcovery

CVE-2026-68303

drm/vc4: hvs/v3d: Fix null dereference in unbind

State
Published
Severity
Not scored
Published
Aug 10, 2026
Updated
Oct 30, 2026
Reserved
Jul 30, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/vc4: hvs/v3d: Fix null dereference in unbind

The hvs and v3d drivers use dev_get_drvdata(master) in their unbind functions. Since the vc4-drm gets removed before its dependent drivers (vc4_hvs/vc4_v3d) the vc4_hvs_unbind/vc4_v3d_unbind functions try to get drvdata of its master and fails with a null dereference error.

Use the data pointer passed to the unbind functions directly instead of dev_get_drvdata(master). This avoids using potentially freed memory.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c8b75bca92cbf064b9fa125fc74a85994452e935 to before 3ed3d0b31500b11c8fd9ef96b7703edbccb32e2eAffected
  • c8b75bca92cbf064b9fa125fc74a85994452e935 to before 3be8dcc1a5854cf24cc332e0d6fc865c47ff49a1Affected
  • c8b75bca92cbf064b9fa125fc74a85994452e935 to before 8f62aae059e06746a18a00af27179c3c0f17f4c7Affected
  • c8b75bca92cbf064b9fa125fc74a85994452e935 to before 708688ec31ac6b35103ba364dc300a09930079d4Affected
  • c8b75bca92cbf064b9fa125fc74a85994452e935 to before 261f0a3f0ac03248284f5116d3258f89c9642215Affected
  • c8b75bca92cbf064b9fa125fc74a85994452e935 to before 7dc3680b7ffe01add3e9299fde8471d2dd53a8aeAffected
LinuxLinux
  • 4.4Affected
  • before 4.4Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.111 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.1.6 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.