Strix
73K

CVE-2026-98781

UnknownEPSS 0.17%

Last modified

CVE-2026-98781 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix pdev reference leak in mtk_drm_bind() When the device is not the mmsys master, mtk_drm_bind() returns early after taking a reference on the disp-mutex device via of_find_device_by_node(), without ever dropping it: mtk_drm_unbind() only puts mutex_dev for the master. Drop the reference before returning from the non-master path.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix pdev reference leak in mtk_drm_bind() When the device is not the mmsys master, mtk_drm_bind() returns early after taking a reference on the disp-mutex device via of_find_device_by_node(), without ever dropping it: mtk_drm_unbind() only puts mutex_dev for the master. Drop the reference before returning from the non-master path.

Metrics

EPSS Probability
0.17%

5.7th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 1ef7ed48356cd5f9af2b7671956991b658d8c2ba, < 4a0ae61067671f556eeaf5ea4e59a1db63163d70; >= 1ef7ed48356cd5f9af2b7671956991b658d8c2ba, < 4a8f9cad0fced77b36b297c67c42730c9cb32ec6; >= 1ef7ed48356cd5f9af2b7671956991b658d8c2ba, < b84f1386d84b3a73f73ebb416a3f97c5d64a8ab3; >= 1ef7ed48356cd5f9af2b7671956991b658d8c2ba, < cb3e0244514d13507c6048777e1d0277e611cf6c; >= 1ef7ed48356cd5f9af2b7671956991b658d8c2ba, < 3753e34b73fcbe2a2edbe984614a008a261697ef
LinuxLinux6.4

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98781?
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix pdev reference leak in mtk_drm_bind() When the device is not the mmsys master, mtk_drm_bind() returns early after taking a reference on the disp-mutex device via of_find_device_by_node(), without ever dropping it: mtk_drm_unbind() only puts mutex_dev for the master. Drop the reference before returning from the non-master path.
How severe is CVE-2026-98781?
Severity scoring for CVE-2026-98781 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-98781?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98781?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST