CVE-2026-43207

media: mtk-mdp: Fix error handling in probe function

HIGH
7.8
CVSS Score
Published: May 6, 2026 at 11:28 AM UTC
Updated: August 5, 2026 at 01:24 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.8
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix error handling in probe function Add mtk_mdp_unregister_m2m_device() on the error handling path to prevent resource leak. Add check for the return value of vpu_get_plat_device() to prevent null pointer dereference. And vpu_get_plat_device() increases the reference count of the returned platform device. Add platform_device_put() to prevent reference leak.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.10 ≤ v < 5.10.2524.10 ≤ v < 5.15.2024.10 ≤ v < 6.1.1654.10 ≤ v < 6.12.754.10 ≤ v < 6.18.164.10 ≤ v < 6.19.64.10 ≤ v < 6.6.1284.10 ≤ v < 7.05.11 ≤ v < 5.15.2025.16 ≤ v < 6.1.1656.13 ≤ v < 6.18.166.19 ≤ v < 6.19.66.2 ≤ v < 6.6.1286.7 ≤ v < 6.12.754.10c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a
Vendor states this is fixed in 0bc43eaf021347f8d5aba87712c36b799695eec6 (fixed)
Vendor states this is fixed in 12cafc15d24611bfb43c82877b1bbb7454a85d5a (fixed)
Vendor states this is fixed in 2e8f53a7382943411557e370f1a4f3946624a30e (fixed)
Vendor states this is fixed in 8a8a3232abac5b972058a5f2cb3e33199d2a8648 (fixed)
Vendor states this is fixed in 9d7962d5c81d6cf3f8dbdb5c71c57600bac5772b (fixed)
Vendor states this is fixed in 9d9c67976eda502edc6b3a148a1c5b6a18b69a98 (fixed)
Vendor states this is fixed in b3fc99fe5b25613dd61c57bc70b8479adff4f60d (fixed)
Vendor states this is fixed in c8737d33d4e8ffae87e5d5edac17f8a705235cc2 (fixed)
Vendor states this is fixed in 4.10 (unaffected)
Vendor states this is fixed in 5.10.252 (unaffected)
Vendor states this is fixed in 5.15.202 (unaffected)
Vendor states this is fixed in 6.1.165 (unaffected)
Vendor states this is fixed in 6.12.75 (unaffected)
Vendor states this is fixed in 6.18.16 (unaffected)
Vendor states this is fixed in 6.19.6 (unaffected)
Vendor states this is fixed in 6.6.128 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusANALYZED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card