The vulnerability in the mtk_drmBind() function of the drivers/gpu/drm/mediatek/mtk_drm_drv.c driver, a component of the Direct Rendering Infrastructure (DRI) graphics card driver for Mediatek’s Linux operating system, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mtkdrmbind function in the drivers/gpu/drm/mediatek/mtkdrmdrv.c driver for the Direct Rendering Infrastructure DRI of Mediatek graphics cards in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-387630)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-387630 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix a null pointer crash in mtkdrmcrtcfinishpageflip It's possible that mtkcrtc-eve...

SUSE CVE-2023-53534

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: mtkdrmcrtc: Add checks for devmkcalloc As the devmkcalloc may return NULL, the return value needs to be checked to avoid NULL poineter dereference...

CVE-2023-53534

Based on the UNPATCHED_CVE_2023_53534.NASL entry, CVE-2023-53534 affects the Linux kernel DRM/Mediatek path (mtk_drm_crtc). The root cause is a missing validation for devm_kcalloc return values, which may be NULL, risking NULL pointer dereference. The advisory notes that this vulnerability has be...

CVE-2023-53388 drm/mediatek: Clean dangling pointer on bind error path

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Clean dangling pointer on bind error path mtkdrmbind can fail, in which case drmdevput is called, destroying the drmdevice object. However a pointer to it was still being held in the private object, and that pointer...

PT-2025-38367

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mtk drm bind function may fail, leading to a dangling pointer within the private object. If a suspend operation is triggered after this failure, the pointer is passed to DRM via the...