CVE-2026-98781

high

Description

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix pdev reference leak in mtk_drm_bind() When the device is not the mmsys master, mtk_drm_bind() returns early after taking a reference on the disp-mutex device via of_find_device_by_node(), without ever dropping it: mtk_drm_unbind() only puts mutex_dev for the master. Drop the reference before returning from the non-master path.

References

https://git.kernel.org/stable/c/cb3e0244514d13507c6048777e1d0277e611cf6c

https://git.kernel.org/stable/c/b84f1386d84b3a73f73ebb416a3f97c5d64a8ab3

https://git.kernel.org/stable/c/4a8f9cad0fced77b36b297c67c42730c9cb32ec6

https://git.kernel.org/stable/c/3753e34b73fcbe2a2edbe984614a008a261697ef

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103866

Details

Source: Mitre, NVD

Published: 2026-10-18

Updated: 2026-10-19

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 7.1

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Severity: High