CVE-2026-89884 media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup

In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup Add the missing sanity check after looking up the SCP to avoid dereferencing a NULL-pointer in case its driver has not yet been bound...

CVE-2026-89885 media: platform: mtk-mdp3: Fix SCP device refcounting

In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Fix SCP device refcounting mdpprobe first tries to get the SCP handle with scpget. When that fails, it falls back to looking up the SCP platform device with getpdevbyid and then reads its driver data. T...

CVE-2026-89885

CVE-2026-89885 is a use-after-free vulnerability in the Linux kernel 's mtk-mdp3 media platform driver. In mdp_probe(), when the primary scp_get() call fails, the fallback path retrieves the SCP platform device via __get_pdev_by_id() but immediately drops the reference after reading driver data. ...

EUVD-2026-80484

In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup Add the missing sanity check after looking up the SCP to avoid dereferencing a NULL-pointer in case its driver has not yet been bound...

CVE-2026-89884

CVE-2026-89884 affects the mtk-mdp3 platform driver in the Linux kernel (MediaTek multimedia display processor). The vulnerability is a NULL pointer dereference that occurs when the driver looks up the SCP (System Control Processor) but the SCP driver has not yet been bound, causing the lookup to...

CVE-2026-89884 media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup

In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup Add the missing sanity check after looking up the SCP to avoid dereferencing a NULL-pointer in case its driver has not yet been bound...

CVE-2026-89885 media: platform: mtk-mdp3: Fix SCP device refcounting

In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Fix SCP device refcounting mdpprobe first tries to get the SCP handle with scpget. When that fails, it falls back to looking up the SCP platform device with getpdevbyid and then reads its driver data. T...

CVE-2026-89884: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup Add the missing sanity check after looking up the SCP to avoid dereferencing a NULL-pointer in case its driver has not yet been bound...

Linux Distros Unpatched Vulnerability : CVE-2026-89885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: platform: mtk-mdp3: Fix SCP device refcounting mdpprobe first tries to get the SCP handle with scpget. When that fails, it falls back to looking up the S...

Linux Distros Unpatched Vulnerability : CVE-2026-89884

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup Add the missing sanity check after looking up the SCP to avoid dereferencing a NULL-pointer in ca...

PT-2026-93526

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mtk-mdp3 platform media component regarding SCP device reference counting. The mdp probe function attempts to obtain an SCP handle using scp get. If this fails, it...

CVE-2026-89885: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Fix SCP device refcounting mdpprobe first tries to get the SCP handle with scpget. When that fails, it falls back to looking up the SCP platform device with getpdevbyid and then reads its driver data. T...

PT-2026-93525

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the mtk-mdp3 platform media component. This happens when the system fails to look up the SCP System Control Processor because its driver has not yet...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Memory: mtk-smi – fixed device leaks during the common probe. Make sure to remove the references made when checking the SMI device during a common probe after a late probe failure e.g., probe deferral, as well as during driver...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: Netwerk: Ethernet: mtkethsoc: out-of-bounds read in mtkhwlrogetfdirentry The “fsp-location” variable comes from the user via ethtoolgetrxnfc. It must be checked to ensure that it is valid, thereby preventing an out-of-bounds read...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-cmdq: Move devmmboxcontrollerregister after devmpmruntimeenable. When mtk-cmdq unbind itself, a WARNON message with the condition pmruntimegetsync 0 is generated. According to the call trace below: cmdqmboxshutdown...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: A bug related to use after free was fixed due to errors in error path handling in mtkjpegdecdevicerun. In mtkjpegprobe, the variable &jpeg-jobtimeoutwork is bound to mtkjpegjobtimeoutwork. In mtkjpegdecdevicerun,...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: xhci-mtk: Fixed an issue where shared HCD resources were leaked when attempting to set the wake-up IRQ. The issue occurred because it was not possible to set @sharedhcd to NULL before reducing the usage count using usbputhcd...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: Remove clkdisable from mtkiommuremove. After the commit b34ea31fe013 “iommu/mediatek: Always enable the clk on resume”, the iommu clock is controlled by the runtime callback. Therefore, the clkdisable function is...

Unity Linux 20.1050a / 20.1070a Security Update: kernel (UTSA-2026-053356)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053356 advisory. In the Linux kernel, the following vulnerability has been resolved: phy: phy-mtk-tphy: Fix some resource leaks in mtkphyinit Use clkdisableunprepare in the error pat...