Unchecked Return Value in Linux kernel - CVE-2026-98783
Published: October 22, 2026
Vulnerability details
The vulnerability allows a local user to potentially cause a denial of service through a kernel crash.
The vulnerability exists due to an unchecked error return in the MediaTek DRM driver's mtk_drm_probe() function when registering the ovl_adaptor platform device. A local user can potentially trigger a kernel crash if able to induce a platform_device_register_data() failure, because the returned error pointer is used without validation and an invalid pointer is passed to subsequent component operations.
Affected software
SUSE Linux Micro
SUSE Linux Micro Extras
kernel-default
kernel-64kb
kernel-64kb-debugsource
kernel-64kb-devel
kernel-default-devel
kernel-syms
kernel-obs-build
kernel-obs-build-debugsource
kernel-default-debugsource
kernel-default-devel-debuginfo
How to mitigate CVE-2026-98783
kernel-default - update to 6.4.0-159998.55.1
kernel-64kb - update to 6.4.0-159998.55.1
kernel-64kb-debugsource - update to 6.4.0-159998.55.1
kernel-64kb-devel - update to 6.4.0-159998.55.1
kernel-default-devel - update to 6.4.0-159998.55.1
kernel-syms - update to 6.4.0-159998.55.1
kernel-obs-build - update to 6.4.0-159998.55.1
kernel-obs-build-debugsource - update to 6.4.0-159998.55.1
kernel-default-debugsource - update to 6.4.0-159998.55.1
kernel-default-devel-debuginfo - update to 6.4.0-159998.55.1
External References
- https://git.kernel.org/stable/c/4acac370aad2d4895a82f40b2f03e9ef70eecaa6
- https://git.kernel.org/stable/c/88f8a92dcb0cb154774595dee7226458de4cbd38
- https://git.kernel.org/stable/c/aeef8a8537bcfb26689edb36ed905b8b2873001c
- https://git.kernel.org/stable/c/bce7698e2e6565bb765bd0522337f29f5f312624
- https://git.kernel.org/stable/c/f0ffb09cf1bf2a0f301f51fb45371c09dc78fcd0