CVE-2026-98783

Source
https://cve.org/CVERecord?id=CVE-2026-98783
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98783.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98783
Downstream
Published
2026-10-18T15:48:20Z
Modified
2026-10-20T02:31:11Z
Summary
drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device

platform_device_register_data() can fail and return an ERR_PTR, but the return value is used without checking, leading to an invalid pointer being stored in ddp_comp[].dev and passed to component_match_add() and mtk_ddp_comp_init(), which could result in a kernel crash.

Add an IS_ERR() check to jump to the error handling path on failure.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98783.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0d9eee9118b77e51eeafc5bf4d008fac97035d56
Fixed
4acac370aad2d4895a82f40b2f03e9ef70eecaa6
Fixed
88f8a92dcb0cb154774595dee7226458de4cbd38
Fixed
aeef8a8537bcfb26689edb36ed905b8b2873001c
Fixed
bce7698e2e6565bb765bd0522337f29f5f312624

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98783.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.4.0
Fixed
6.12.113
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.56
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.10

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98783.json"