CVE-2026-80658

Source
https://cve.org/CVERecord?id=CVE-2026-80658
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80658.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-80658
Downstream
Published
2026-08-28T06:49:03.796Z
Modified
2026-08-30T03:48:20.930311545Z
Summary
drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove()
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/rockchip: dwdp: Fix null-ptr-deref in dwdp_remove()

Attempting to access driver data in the platform driver ->remove() callback may lead to a null pointer dereference since there is no guaranty that the component ->bind() callback invoking platformsetdrvdata() was executed.

A common scenario is when Rockchip DRM driver didn't manage to run componentbindall() because of an (unrelated) error causing early return from rockchipdrmbind().

Drop the unnecessary call to platformgetdrvdata() and, instead, reference the target device structure via platform_device.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80658.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d68ba7bac9555d05e2f5b310c898b2a5c7eff174
Fixed
b3ec263a719e0d499bd95d20012d90d7e8641655
Fixed
33bc9fba3ae05863fabe3436ddca2ca4f4939c5e
Fixed
9456381d8b60bb7dd42f2f04afe5ee4ce6e0bc12

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80658.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.18.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80658.json"