Missing Release of Resource after Effective Lifetime in Linux kernel - CVE-2026-98782

Vulnerability identifier: #VU157146

CSH Severity: Low

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-98782

CWE-ID: CWE-772

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local privileged user to leak kernel resources, potentially causing a denial of service through resource exhaustion.

The vulnerability exists due to missing release of a registered OVL adaptor platform device in the MediaTek DRM driver when initialization fails after device registration or the driver is unbound. A local privileged user can trigger these driver lifecycle operations, where permitted, to leave platform devices registered and potentially exhaust system resources.

The affected device is created only when the display pipeline requires the OVL adaptor.

Linux kernel
SUSE Linux Micro
SUSE Linux Micro Extras
kernel-default
kernel-64kb
kernel-64kb-debugsource
kernel-64kb-devel
kernel-default-devel
kernel-syms
kernel-obs-build
kernel-obs-build-debugsource
kernel-default-debugsource
kernel-default-devel-debuginfo

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
kernel-default - update to 6.4.0-159998.55.1
kernel-64kb - update to 6.4.0-159998.55.1
kernel-64kb-debugsource - update to 6.4.0-159998.55.1
kernel-64kb-devel - update to 6.4.0-159998.55.1
kernel-default-devel - update to 6.4.0-159998.55.1
kernel-syms - update to 6.4.0-159998.55.1
kernel-obs-build - update to 6.4.0-159998.55.1
kernel-obs-build-debugsource - update to 6.4.0-159998.55.1
kernel-default-debugsource - update to 6.4.0-159998.55.1
kernel-default-devel-debuginfo - update to 6.4.0-159998.55.1

• https://git.kernel.org/stable/c/03fb1c657028cb9f189b400f3adb46e3ba676aa5
• https://git.kernel.org/stable/c/048739be3e9cacae5301b68245668002fe6f0ce5
• https://git.kernel.org/stable/c/3d85bd738aba61df14dfaf8fe638e2172d8427bf
• https://git.kernel.org/stable/c/629458b7e49559593823e351535294db17331be7
• https://git.kernel.org/stable/c/8e3a350075b556f2fed4517705935bfee4529fb6

• Missing Release of Resource after Effective Lifetime in Linux kernel drm mediatek driver
• SUSE update for the Linux Kernel