GHSA-GXV2-4P27-M9PP
Vulnerability from github – Published: 2026-10-18 18:32 – Updated: 2026-10-21 15:41In the Linux kernel, the following vulnerability has been resolved:
drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device
platform_device_register_data() can fail and return an ERR_PTR, but the return value is used without checking, leading to an invalid pointer being stored in ddp_comp[].dev and passed to component_match_add() and mtk_ddp_comp_init(), which could result in a kernel crash.
Add an IS_ERR() check to jump to the error handling path on failure.
{
"affected": [],
"aliases": [
"CVE-2026-98783"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-10-18T16:17:32Z",
"severity": null
},
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device\n\nplatform_device_register_data() can fail and return an ERR_PTR, but the\nreturn value is used without checking, leading to an invalid pointer\nbeing stored in ddp_comp[].dev and passed to component_match_add() and\nmtk_ddp_comp_init(), which could result in a kernel crash.\n\nAdd an IS_ERR() check to jump to the error handling path on failure.",
"id": "GHSA-gxv2-4p27-m9pp",
"modified": "2026-10-21T15:41:59Z",
"published": "2026-10-18T18:32:03Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98783"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/4acac370aad2d4895a82f40b2f03e9ef70eecaa6"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/88f8a92dcb0cb154774595dee7226458de4cbd38"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/aeef8a8537bcfb26689edb36ed905b8b2873001c"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/bce7698e2e6565bb765bd0522337f29f5f312624"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/f0ffb09cf1bf2a0f301f51fb45371c09dc78fcd0"
}
],
"schema_version": "1.4.0",
"severity": []
}
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.