CVE-2026-80658
Received Received - Intake

Null Pointer Dereference in Linux Kernel Rockchip DRM Driver

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove() Attempting to access driver data in the platform driver ->remove() callback may lead to a null pointer dereference since there is no guaranty that the component ->bind() callback invoking platform_set_drvdata() was executed. A common scenario is when Rockchip DRM driver didn't manage to run component_bind_all() because of an (unrelated) error causing early return from rockchip_drm_bind(). Drop the unnecessary call to platform_get_drvdata() and, instead, reference the target device structure via platform_device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-08-28
Generated
2026-09-17
AI Q&A
2026-08-28
EPSS Evaluated
2026-09-15
NVD
CVE-2026-80658
EUVD
EUVD-2026-67534

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a null pointer dereference flaw in the Linux kernel's Rockchip DRM driver. It occurs in the dw_dp_remove() function when attempting to access driver data during driver removal. The issue arises because platform_set_drvdata() may not have been called if component_bind_all() fails earlier in the initialization process.

Detection Guidance

This vulnerability is specific to the Linux kernel's Rockchip DRM driver and cannot be detected via network commands. Check kernel logs for null pointer dereference errors in drm/rockchip or dw_dp components using dmesg | grep -i 'drm\|rockchip\|dw_dp\|null'.

Impact Analysis

This vulnerability could cause a system crash or kernel panic when the affected driver is removed, potentially leading to denial of service. Users might experience unexpected system reboots or freezes during driver unloading or system shutdown.

Compliance Impact

This vulnerability is a null pointer dereference in the Linux kernel's Rockchip DRM driver, which could cause system instability or crashes. It does not directly affect data privacy or security controls required by GDPR or HIPAA, as it is not a data exposure or access control issue.

Mitigation Strategies

Update the Linux kernel to a patched version that resolves CVE-2026-80658. If immediate update is not possible, avoid using Rockchip DRM drivers or disable the affected component via kernel module blacklisting.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80658. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart