CVE-2026-98782

drm/mediatek: Fix ovl adaptor platform device leak

State: Published
Severity: Not scored
Published: Oct 18, 2026
Updated: Oct 21, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/mediatek: Fix ovl adaptor platform device leak

mtk_drm_probe() creates an OVL adaptor platform device with platform_device_register_data() when the display pipeline requires the OVL adaptor.

If a later initialization step fails, the probe error path releases the DRM resources without unregistering the already registered OVL adaptor device. The normal remove path likewise leaves the device registered after the DRM driver is unbound.

Keep track of whether the OVL adaptor was successfully registered and unregister it on probe failure. Also recover the platform device from the stored DDP component device and unregister it during normal removal.

The issue was identified by a static analysis tool I developed and confirmed by manual review.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0d9eee9118b77e51eeafc5bf4d008fac97035d56 to before 03fb1c657028cb9f189b400f3adb46e3ba676aa5Affected 0d9eee9118b77e51eeafc5bf4d008fac97035d56 to before 3d85bd738aba61df14dfaf8fe638e2172d8427bfAffected 0d9eee9118b77e51eeafc5bf4d008fac97035d56 to before 629458b7e49559593823e351535294db17331be7Affected 0d9eee9118b77e51eeafc5bf4d008fac97035d56 to before 8e3a350075b556f2fed4517705935bfee4529fb6Affected 0d9eee9118b77e51eeafc5bf4d008fac97035d56 to before 048739be3e9cacae5301b68245668002fe6f0ce5Affected
LinuxLinux	6.4Affected before 6.4Not affected 6.6.160 through 6.6.Not affected 6.12.113 through 6.12.Not affected 6.18.56 through 6.18.Not affected 7.2.10 through 7.2.Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

0d9eee9118b77e51eeafc5bf4d008fac97035d56 to before 03fb1c657028cb9f189b400f3adb46e3ba676aa5Affected
0d9eee9118b77e51eeafc5bf4d008fac97035d56 to before 3d85bd738aba61df14dfaf8fe638e2172d8427bfAffected
0d9eee9118b77e51eeafc5bf4d008fac97035d56 to before 629458b7e49559593823e351535294db17331be7Affected
0d9eee9118b77e51eeafc5bf4d008fac97035d56 to before 8e3a350075b556f2fed4517705935bfee4529fb6Affected
0d9eee9118b77e51eeafc5bf4d008fac97035d56 to before 048739be3e9cacae5301b68245668002fe6f0ce5Affected

LinuxLinux

6.4Affected
before 6.4Not affected
6.6.160 through 6.6.*Not affected
6.12.113 through 6.12.*Not affected
6.18.56 through 6.18.*Not affected
7.2.10 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.