CVE-2026-98785 drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check dcstatecreatecopy for NULL in dmsuspend dcstatecreatecopy can return NULL on allocation failure. dmsuspend only conditionally skips dmgpuresettoggleinterrupts and continues execution, returning success...

CVE-2026-98786

The Linux kernel contains a vulnerability in the drm/amd/display driver where dm_dp_mst_is_port_support_mode() and get_conv_frl_bw() perform NULL pointer dereferences . The issue occurs because these functions access aconnector->dc_sink without sufficient checks during MST unplug operations. S...

EUVD-2026-103870

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check dcstatecreatecopy for NULL in dmsuspend dcstatecreatecopy can return NULL on allocation failure. dmsuspend only conditionally skips dmgpuresettoggleinterrupts and continues execution, returning success...

CVE-2026-98784

The Linux kernel contains a vulnerability in the drm/amdgpu/gfx6 component where firmware requested in gfx_v6_0_init_microcode() is not released when the GFX block is torn down. This results in a firmware resource leak . The issue is addressed by adding gfx_v6_0_free_microcode() and calling it fr...

EUVD-2026-103869

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx6: fix firmware leak on teardown The firmware requested in gfxv60initmicrocode is not released when the GFX block is torn down, leaking the firmware resources. Add gfxv60freemicrocode and call it from gfxv60swfini t...

CVE-2026-98784 drm/amdgpu/gfx6: fix firmware leak on teardown

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx6: fix firmware leak on teardown The firmware requested in gfxv60initmicrocode is not released when the GFX block is torn down, leaking the firmware resources. Add gfxv60freemicrocode and call it from gfxv60swfini t...

CVE-2026-98784 drm/amdgpu/gfx6: fix firmware leak on teardown

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx6: fix firmware leak on teardown The firmware requested in gfxv60initmicrocode is not released when the GFX block is torn down, leaking the firmware resources. Add gfxv60freemicrocode and call it from gfxv60swfini t...

CVE-2026-98783 drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add missing ISERR check for ovladaptor platform device platformdeviceregisterdata can fail and return an ERRPTR, but the return value is used without checking, leading to an invalid pointer being stored in ddpcomp.d...

EUVD-2026-103868

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add missing ISERR check for ovladaptor platform device platformdeviceregisterdata can fail and return an ERRPTR, but the return value is used without checking, leading to an invalid pointer being stored in ddpcomp.d...

CVE-2026-98783 drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add missing ISERR check for ovladaptor platform device platformdeviceregisterdata can fail and return an ERRPTR, but the return value is used without checking, leading to an invalid pointer being stored in ddpcomp.d...

CVE-2026-98783

The Linux kernel contains a vulnerability in the drm/mediatek driver regarding the ovl_adaptor platform device. The platform_device_register_data() function can fail and return an ERR_PTR, but because the return value is not checked, an invalid pointer is stored in ddp_comp[].dev. This invalid po...

CVE-2026-98782

The Linux kernel contains a memory leak vulnerability in the drm/mediatek driver. Specifically, the mtk_drm_probe() function registers an OVL adaptor platform device using platform_device_register_data(), but the driver fails to unregister this device if subsequent initialization steps fail or du...

EUVD-2026-103867

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix ovl adaptor platform device leak mtkdrmprobe creates an OVL adaptor platform device with platformdeviceregisterdata when the display pipeline requires the OVL adaptor. If a later initialization step fails, the...

CVE-2026-98782 drm/mediatek: Fix ovl adaptor platform device leak

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix ovl adaptor platform device leak mtkdrmprobe creates an OVL adaptor platform device with platformdeviceregisterdata when the display pipeline requires the OVL adaptor. If a later initialization step fails, the...

CVE-2026-98782 drm/mediatek: Fix ovl adaptor platform device leak

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix ovl adaptor platform device leak mtkdrmprobe creates an OVL adaptor platform device with platformdeviceregisterdata when the display pipeline requires the OVL adaptor. If a later initialization step fails, the...

CVE-2026-98781

The Linux kernel contains a pdev reference leak within the drm/mediatek driver. Specifically, the mtk_drm_bind() function incorrectly retains a reference on the disp-mutex device when called via of_find_device_by_node() for devices that are not the mmsys master . Because the reference is not drop...

EUVD-2026-103866

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix pdev reference leak in mtkdrmbind When the device is not the mmsys master, mtkdrmbind returns early after taking a reference on the disp-mutex device via offinddevicebynode, without ever dropping it: mtkdrmunbin...

CVE-2026-98781 drm/mediatek: Fix pdev reference leak in mtk_drm_bind()

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix pdev reference leak in mtkdrmbind When the device is not the mmsys master, mtkdrmbind returns early after taking a reference on the disp-mutex device via offinddevicebynode, without ever dropping it: mtkdrmunbin...

CVE-2026-98781 drm/mediatek: Fix pdev reference leak in mtk_drm_bind()

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix pdev reference leak in mtkdrmbind When the device is not the mmsys master, mtkdrmbind returns early after taking a reference on the disp-mutex device via offinddevicebynode, without ever dropping it: mtkdrmunbin...

CVE-2026-98780

The Linux kernel contains a memory leak vulnerability within the drm/amdgpu driver. Specifically, the amdgpu_discovery_sysfs_ips() function allocates an ip_hw_instance using kzalloc_flex() and initializes an embedded kobject, but fails to handle errors correctly when calling kobject_add(). If kob...