High 7.8Published May 6, 2026

CVE-2026-43207media: mtk-mdp: Fix error handling in probe function

Updated under an hour ago (Oct 27, 2026, 5:40 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix error handling in probe function Add mtk_mdp_unregister_m2m_device() on the error handling path to prevent resource leak. Add check for the return value of vpu_get_plat_device() to prevent null pointer dereference. And vpu_get_plat_device() increases the reference count of the returned platform device. Add platform_device_put() to prevent reference leak.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a before 9d9c67976eda502edc6b3a148a1c5b6a18b69a98; from c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a before 0bc43eaf021347f8d5aba87712c36b799695eec6; from c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a before 9d7962d5c81d6cf3f8dbdb5c71c57600bac5772b; from c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a before 12cafc15d24611bfb43c82877b1bbb7454a85d5a; from c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a before c8737d33d4e8ffae87e5d5edac17f8a705235cc2; from c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a before b3fc99fe5b25613dd61c57bc70b8479adff4f60d; from c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a before 2e8f53a7382943411557e370f1a4f3946624a30e; from c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a before 8a8a3232abac5b972058a5f2cb3e33199d2a8648	CNA record
linux linux_kernel linux:linux_kernel	from 4.10 before 5.10.252; from 5.11 before 5.15.202; from 5.16 before 6.1.165; from 6.2 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.16; from 6.19 before 6.19.6	NVD

References

References

https://git.kernel.org/stable/c/9d9c67976eda502edc6b3a148a1c5b6a18b69a98	patch
https://git.kernel.org/stable/c/0bc43eaf021347f8d5aba87712c36b799695eec6	patch
https://git.kernel.org/stable/c/9d7962d5c81d6cf3f8dbdb5c71c57600bac5772b	patch
https://git.kernel.org/stable/c/12cafc15d24611bfb43c82877b1bbb7454a85d5a	patch
https://git.kernel.org/stable/c/c8737d33d4e8ffae87e5d5edac17f8a705235cc2	patch
https://git.kernel.org/stable/c/b3fc99fe5b25613dd61c57bc70b8479adff4f60d	patch
https://git.kernel.org/stable/c/2e8f53a7382943411557e370f1a4f3946624a30e	patch
https://git.kernel.org/stable/c/8a8a3232abac5b972058a5f2cb3e33199d2a8648	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.