Bug 2555116 (CVE-2026-98782) - CVE-2026-98782 kernel: drm/mediatek: Fix ovl adaptor platform device leak
Summary: CVE-2026-98782 kernel: drm/mediatek: Fix ovl adaptor platform device leak
Keywords:
Status: NEW
Alias: CVE-2026-98782
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-10-18 15:55 UTC by OSIDB Bzimport
Modified: 2026-10-23 09:09 UTC (History)
17 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-10-18 15:55:21 UTC
In the Linux kernel, the following vulnerability has been resolved:

drm/mediatek: Fix ovl adaptor platform device leak

mtk_drm_probe() creates an OVL adaptor platform device with
platform_device_register_data() when the display pipeline requires the
OVL adaptor.

If a later initialization step fails, the probe error path releases
the DRM resources without unregistering the already registered OVL
adaptor device. The normal remove path likewise leaves the device
registered after the DRM driver is unbound.

Keep track of whether the OVL adaptor was successfully registered and
unregister it on probe failure. Also recover the platform device from
the stored DDP component device and unregister it during normal
removal.

The issue was identified by a static analysis tool I developed and
confirmed by manual review.


Note You need to log in before you can comment on or make changes to this bug.