Vulnerability in Linux

[ Description ]Official description

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix pdev reference leak in mtk_drm_bind() When the device is not the mmsys master, mtk_drm_bind() returns early after taking a reference on the disp-mutex device via of_find_device_by_node(), without ever dropping it: mtk_drm_unbind() only puts mutex_dev for the master. Drop the reference before returning from the non-master path.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund18 Oct 2026WID-SEC-2026-4019

  Linux Kernel: Multiple vulnerabilities Translated from German

  CVE-2026-98866CVE-2026-98624CVE-2026-98745+326 more CVEs

[ References ]References

• git.kernel.org/stable/c/3753e34b73fcbe2a2edbe984614a008a261697ef
• git.kernel.org/stable/c/4a0ae61067671f556eeaf5ea4e59a1db63163d70
• git.kernel.org/stable/c/4a8f9cad0fced77b36b297c67c42730c9cb32ec6
• git.kernel.org/stable/c/b84f1386d84b3a73f73ebb416a3f97c5d64a8ab3
• git.kernel.org/stable/c/cb3e0244514d13507c6048777e1d0277e611cf6c