CVE-2026-98783

Received Received - Intake

Missing IS_ERR Check in Mediatek DRM Driver

Publication date: 2026-10-18

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device platform_device_register_data() can fail and return an ERR_PTR, but the return value is used without checking, leading to an invalid pointer being stored in ddp_comp[].dev and passed to component_match_add() and mtk_ddp_comp_init(), which could result in a kernel crash. Add an IS_ERR() check to jump to the error handling path on failure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-18

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-18

EPSS Evaluated

N/A

NVD

CVE-2026-98783

EUVD

EUVD-2026-103868

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	0d9eee9118b77e51eeafc5bf4d008fac97035d56
Linux	Linux	0d9eee9118b77e51eeafc5bf4d008fac97035d56
Linux	Linux	0d9eee9118b77e51eeafc5bf4d008fac97035d56
Linux	Linux	0d9eee9118b77e51eeafc5bf4d008fac97035d56
Linux	Linux	6.4

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a missing error check when registering a platform device for the ovl_adaptor. The function platform_device_register_data() can fail and return an error pointer, but the code does not check for this failure. This leads to an invalid pointer being stored and passed to other functions, potentially causing a kernel crash.

Detection Guidance

This vulnerability is specific to the Linux kernel's DRM/MediaTek driver and does not have direct network detection methods. To check for this issue, inspect the kernel logs for errors related to drm/mediatek or platform device registration failures. Commands like dmesg | grep -i mediatek or journalctl -k | grep -i mediatek may help identify related errors.

Impact Analysis

If exploited, this vulnerability could cause the Linux kernel to crash, leading to system instability or denial of service. It may affect systems using the Mediatek DRM driver, potentially disrupting graphics and display functionality.

Compliance Impact

This vulnerability is a Linux kernel issue that could cause a kernel crash due to improper error handling in device registration. It does not directly impact data privacy or security controls required by GDPR or HIPAA, as it is a system stability issue rather than a data exposure or compliance control failure.

Mitigation Strategies

Update your Linux kernel to the latest patched version to resolve the missing IS_ERR check in the drm/mediatek driver. Monitor kernel logs for errors related to ddp_comp or mtk_ddp_comp_init after applying the update.

Hi! I’m here to help you understand CVE-2026-98783. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70