Riskcovery

CVE-2026-89884

media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup

State
Published
Severity
Not scored
Published
Sep 16, 2026
Updated
Oct 30, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup

Add the missing sanity check after looking up the SCP to avoid dereferencing a NULL-pointer in case its driver has not yet been bound.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 61890ccaefaff89f5babd2c8412fd222c3f5fe38 to before c49e8097815463199f42304438038e90b02ba7c5Affected
  • 61890ccaefaff89f5babd2c8412fd222c3f5fe38 to before 7cdb1e2d3b0e56385610b6e47e88783e8c4effc4Affected
  • 61890ccaefaff89f5babd2c8412fd222c3f5fe38 to before 28548387d79d14c975e77787ebd1f051265e1396Affected
  • 61890ccaefaff89f5babd2c8412fd222c3f5fe38 to before 5026f927ef4150ba12da6f1098cf7952d77b14b6Affected
  • 61890ccaefaff89f5babd2c8412fd222c3f5fe38 to before 426ead7eed6d6b3c3f0fe0925c112ef73fc87256Affected
  • 61890ccaefaff89f5babd2c8412fd222c3f5fe38 to before 90368323fb244da0504e3da37a182f8e89bcc3b9Affected
LinuxLinux
  • 6.1Affected
  • before 6.1Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.110 through 6.12.*Not affected
  • 6.18.51 through 6.18.*Not affected
  • 7.2.5 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.