CVE-2026-80658

drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove()

State
Published
Severity
Not scored
Published
Aug 28, 2026
Updated
Aug 28, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove()

Attempting to access driver data in the platform driver ->remove() callback may lead to a null pointer dereference since there is no guaranty that the component ->bind() callback invoking platform_set_drvdata() was executed.

A common scenario is when Rockchip DRM driver didn't manage to run component_bind_all() because of an (unrelated) error causing early return from rockchip_drm_bind().

Drop the unnecessary call to platform_get_drvdata() and, instead, reference the target device structure via platform_device.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d68ba7bac9555d05e2f5b310c898b2a5c7eff174 to before b3ec263a719e0d499bd95d20012d90d7e8641655Affected
  • d68ba7bac9555d05e2f5b310c898b2a5c7eff174 to before 33bc9fba3ae05863fabe3436ddca2ca4f4939c5eAffected
  • d68ba7bac9555d05e2f5b310c898b2a5c7eff174 to before 9456381d8b60bb7dd42f2f04afe5ee4ce6e0bc12Affected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.