CVE-2026-89884

Not scored yetLast modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup

Add the missing sanity check after looking up the SCP to avoid dereferencing a NULL-pointer in case its driver has not yet been bound.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 61890ccaefaff89f5babd2c8412fd222c3f5fe38, < c49e8097815463199f42304438038e90b02ba7c5; >= 61890ccaefaff89f5babd2c8412fd222c3f5fe38, < 7cdb1e2d3b0e56385610b6e47e88783e8c4effc4; >= 61890ccaefaff89f5babd2c8412fd222c3f5fe38, < 28548387d79d14c975e77787ebd1f051265e1396; >= 61890ccaefaff89f5babd2c8412fd222c3f5fe38, < 5026f927ef4150ba12da6f1098cf7952d77b14b6; >= 61890ccaefaff89f5babd2c8412fd222c3f5fe38, < 426ead7eed6d6b3c3f0fe0925c112ef73fc87256; >= 61890ccaefaff89f5babd2c8412fd222c3f5fe38, < 90368323fb244da0504e3da37a182f8e89bcc3b9
LinuxLinux6.1

References

Timeline

Published
Sep 16, 2026
Last modified
Oct 30, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-898858.4In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Fix SCP device refcounting mdp_probe() firsCVE-2026-89886In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix async notifier cleanup leak on parse error isysCVE-2026-898877.8In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov7740: fix use-after-destroy in remove The ov7740_remove(CVE-2026-898887.8In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov02a10: fix endpoint parsing use-after-free The ov02a10_cCVE-2026-89889In the Linux kernel, the following vulnerability has been resolved: media: i2c: imx415: Release runtime PM reference on VBLANK error The VCVE-2026-89896.8Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recoCVE-2026-898907.8In the Linux kernel, the following vulnerability has been resolved: media: go7007: defer the ALSA v4l2 put until card release go7007_snd_iCVE-2026-89891In the Linux kernel, the following vulnerability has been resolved: media: em28xx: fix use-after-free of dev_next->devlist on disconnect WCVE-2026-89892In the Linux kernel, the following vulnerability has been resolved: media: em28xx: defer audio-only extension registration The audio-only CVE-2026-898937.8In the Linux kernel, the following vulnerability has been resolved: media: cx23885: cancel NetUP CI work before teardown netup_ci_exit() fCVE-2026-898947.8In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: reject geometry changes while the VBI queue is busy viCVE-2026-89895In the Linux kernel, the following vulnerability has been resolved: media: cobalt: Avoid freeing ALSA private data twice snd_cobalt_card_c
CVE-2026-89884: Unscored | Vulnix