{"id":"CVE-2026-98783","title":"kernel: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (CVE-2026-98783)","summary":"A flaw was found in the Linux kernel's MediaTek DRM (Direct Rendering Manager) driver. The driver fails to verify whether the display overlay adaptor platform device is successfully registered during initialization. If the registration fai…","severity":"medium","cvss":4.1,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvssSource":"vendor","cwe":"CWE-252","vendor":"Red Hat","product":"Linux","affected":["Linux >= 0d9eee9118b77e51eeafc5bf4d008fac97035d56 < f0ffb09cf1bf2a0f301f51fb45371c09dc78fcd0","Linux >= 0d9eee9118b77e51eeafc5bf4d008fac97035d56 < 4acac370aad2d4895a82f40b2f03e9ef70eecaa6","Linux >= 0d9eee9118b77e51eeafc5bf4d008fac97035d56 < 88f8a92dcb0cb154774595dee7226458de4cbd38","Linux >= 0d9eee9118b77e51eeafc5bf4d008fac97035d56 < aeef8a8537bcfb26689edb36ed905b8b2873001c","Linux >= 0d9eee9118b77e51eeafc5bf4d008fac97035d56 < bce7698e2e6565bb765bd0522337f29f5f312624","Linux 6.4"],"published":"2026-10-18","updated":"2026-10-23","sourceUpdated":"2026-10-23T10:59:47+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98783.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98783.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-98783"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555183"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-98783"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98783"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98783.mbox"},{"url":"https://git.kernel.org/stable/c/f0ffb09cf1bf2a0f301f51fb45371c09dc78fcd0"},{"url":"https://git.kernel.org/stable/c/4acac370aad2d4895a82f40b2f03e9ef70eecaa6"},{"url":"https://git.kernel.org/stable/c/88f8a92dcb0cb154774595dee7226458de4cbd38"},{"url":"https://git.kernel.org/stable/c/aeef8a8537bcfb26689edb36ed905b8b2873001c"},{"url":"https://git.kernel.org/stable/c/bce7698e2e6565bb765bd0522337f29f5f312624"}],"tags":["csaf","vex","red-hat","cve.org"],"epss":0.00168,"epssPercentile":0.0597,"ingestedAt":"2026-10-18T16:47:32.488Z","slug":"CVE-2026-98783","body":"## Overview\n\nA flaw was found in the Linux kernel's MediaTek DRM (Direct Rendering Manager) driver. The driver fails to verify whether the display overlay adaptor platform device is successfully registered during initialization. If the registration fails, the system attempts to use an invalid memory pointer, leading to a kernel crash and a Denial of Service (DoS).\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98783.json)\n\n**kernel: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device** — rated Moderate by Red Hat. Released 2026-10-18, updated 2026-10-23.\n\nNot affected:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 6\n- Red Hat Enterprise Linux 7\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat OpenShift Container Platform 4\n\n## Remediation\n\nRefer to the advisory for fix availability.","depth":"sunlit","depthScore":23,"depthScoreParts":{"impact":22.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":228110,"id":"CVE-2026-98783","ts":1792758091230,"field":"cvss","old":null,"new":"4.1"},{"seq":228109,"id":"CVE-2026-98783","ts":1792758091230,"field":"severity","old":"none","new":"medium"}]}