drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.17 % · percentile 6 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix pdev reference leak in mtk_drm_bind() When the device is not the mmsys master, mtk_drm_bind() returns early after taking a reference on the disp-mutex device via of_find_device_by_node(), without ever dropping it: mtk_drm_unbind() only puts mutex_dev for the master. Drop the reference before returning from the non-master path.
References
- https://git.kernel.org/stable/c/4a0ae61067671f556eeaf5ea4e59a1db63163d70
- https://git.kernel.org/stable/c/4a8f9cad0fced77b36b297c67c42730c9cb32ec6
- https://git.kernel.org/stable/c/b84f1386d84b3a73f73ebb416a3f97c5d64a8ab3
- https://git.kernel.org/stable/c/cb3e0244514d13507c6048777e1d0277e611cf6c
- https://git.kernel.org/stable/c/3753e34b73fcbe2a2edbe984614a008a261697ef
European references
- ENISA EUVD · EUVD-2026-103866
- GCVE · GCVE-0-2026-98781
CERT-FR advisories
- CERTFR-2026-AVI-1375 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 1ef7ed48356cd5f9af2b7671956991b658d8c2ba < 4a0ae61067671f556eeaf5ea4e59a1db63163d70 ; affected 1ef7ed48356cd5f9af2b7671956991b658d8c2ba < 4a8f9cad0fced77b36b297c67c42730c9cb32ec6 ; affected 1ef7ed48356cd5f9af2b7671956991b658d8c2ba < b84f1386d84b3a73f73ebb416a3f97c5d64a8ab3 ; affected 1ef7ed48356cd5f9af2b7671956991b658d8c2ba < cb3e0244514d13507c6048777e1d0277e611cf6c ; affected 1ef7ed48356cd5f9af2b7671956991b658d8c2ba < 3753e34b73fcbe2a2edbe984614a008a261697ef |
| Linux · Linux | affected 6.4 ; unaffected 0 < 6.4 ; unaffected 6.6.160 ≤ 6.6.* ; unaffected 6.12.113 ≤ 6.12.* ; unaffected 6.18.56 ≤ 6.18.* ; unaffected 7.2.10 ≤ 7.2.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |