CVE-2026-98783

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98783", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.369Z", "datePublished": "2026-10-18T15:48:20.377Z", "dateUpdated": "2026-10-21T12:56:57.231Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-21T12:56:57.231Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device\n\nplatform_device_register_data() can fail and return an ERR_PTR, but the\nreturn value is used without checking, leading to an invalid pointer\nbeing stored in ddp_comp[].dev and passed to component_match_add() and\nmtk_ddp_comp_init(), which could result in a kernel crash.\n\nAdd an IS_ERR() check to jump to the error handling path on failure."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/mediatek/mtk_drm_drv.c"], "versions": [{"version": "0d9eee9118b77e51eeafc5bf4d008fac97035d56", "lessThan": "f0ffb09cf1bf2a0f301f51fb45371c09dc78fcd0", "status": "affected", "versionType": "git"}, {"version": "0d9eee9118b77e51eeafc5bf4d008fac97035d56", "lessThan": "4acac370aad2d4895a82f40b2f03e9ef70eecaa6", "status": "affected", "versionType": "git"}, {"version": "0d9eee9118b77e51eeafc5bf4d008fac97035d56", "lessThan": "88f8a92dcb0cb154774595dee7226458de4cbd38", "status": "affected", "versionType": "git"}, {"version": "0d9eee9118b77e51eeafc5bf4d008fac97035d56", "lessThan": "aeef8a8537bcfb26689edb36ed905b8b2873001c", "status": "affected", "versionType": "git"}, {"version": "0d9eee9118b77e51eeafc5bf4d008fac97035d56", "lessThan": "bce7698e2e6565bb765bd0522337f29f5f312624", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/mediatek/mtk_drm_drv.c"], "versions": [{"version": "6.4", "status": "affected"}, {"version": "0", "lessThan": "6.4", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.160", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.113", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.56", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.10", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "6.6.160"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "6.12.113"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "6.18.56"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "7.2.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/f0ffb09cf1bf2a0f301f51fb45371c09dc78fcd0"}, {"url": "https://git.kernel.org/stable/c/4acac370aad2d4895a82f40b2f03e9ef70eecaa6"}, {"url": "https://git.kernel.org/stable/c/88f8a92dcb0cb154774595dee7226458de4cbd38"}, {"url": "https://git.kernel.org/stable/c/aeef8a8537bcfb26689edb36ed905b8b2873001c"}, {"url": "https://git.kernel.org/stable/c/bce7698e2e6565bb765bd0522337f29f5f312624"}], "title": "drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/gpu/drm/mediatek/mtk_drm_drv.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "f0ffb09cf1bf2a0f301f51fb45371c09dc78fcd0", "status": "affected", "version": "0d9eee9118b77e51eeafc5bf4d008fac97035d56", "versionType": "git"}, {"lessThan": "4acac370aad2d4895a82f40b2f03e9ef70eecaa6", "status": "affected", "version": "0d9eee9118b77e51eeafc5bf4d008fac97035d56", "versionType": "git"}, {"lessThan": "88f8a92dcb0cb154774595dee7226458de4cbd38", "status": "affected", "version": "0d9eee9118b77e51eeafc5bf4d008fac97035d56", "versionType": "git"}, {"lessThan": "aeef8a8537bcfb26689edb36ed905b8b2873001c", "status": "affected", "version": "0d9eee9118b77e51eeafc5bf4d008fac97035d56", "versionType": "git"}, {"lessThan": "bce7698e2e6565bb765bd0522337f29f5f312624", "status": "affected", "version": "0d9eee9118b77e51eeafc5bf4d008fac97035d56", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/gpu/drm/mediatek/mtk_drm_drv.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.4"}, {"lessThan": "6.4", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.160", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.113", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.56", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.10", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device\n\nplatform_device_register_data() can fail and return an ERR_PTR, but the\nreturn value is used without checking, leading to an invalid pointer\nbeing stored in ddp_comp[].dev and passed to component_match_add() and\nmtk_ddp_comp_init(), which could result in a kernel crash.\n\nAdd an IS_ERR() check to jump to the error handling path on failure."}], "id": "CVE-2026-98783", "lastModified": "2026-10-21T13:21:46.390", "metrics": {}, "published": "2026-10-18T16:17:32.267", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4acac370aad2d4895a82f40b2f03e9ef70eecaa6"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/88f8a92dcb0cb154774595dee7226458de4cbd38"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/aeef8a8537bcfb26689edb36ed905b8b2873001c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/bce7698e2e6565bb765bd0522337f29f5f312624"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f0ffb09cf1bf2a0f301f51fb45371c09dc78fcd0"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device", "id": "2555183", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2555183"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.1", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-252", "details": ["A flaw was found in the Linux kernel's MediaTek DRM (Direct Rendering Manager) driver. The driver fails to verify whether the display overlay adaptor platform device is successfully registered during initialization. If the registration fails, the system attempts to use an invalid memory pointer, leading to a kernel crash and a Denial of Service (DoS)."], "name": "CVE-2026-98783", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98783\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98783\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98783.mbox"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0d9eee9118b77e51eeafc5bf4d008fac97035d56,4acac370aad2d4895a82f40b2f03e9ef70eecaa6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0d9eee9118b77e51eeafc5bf4d008fac97035d56,88f8a92dcb0cb154774595dee7226458de4cbd38)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0d9eee9118b77e51eeafc5bf4d008fac97035d56,aeef8a8537bcfb26689edb36ed905b8b2873001c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0d9eee9118b77e51eeafc5bf4d008fac97035d56,bce7698e2e6565bb765bd0522337f29f5f312624)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.4"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.4)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.113,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.56,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.10,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-18T23:30:14.146427+00:00", "updated": "2026-10-23T19:45:17.225346+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}