In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix ovl adaptor platform device leak mtk_drm_probe() creates an… (CVE-2026-98782)

The vulnerability involves the drm/mediatek driver in the Linux kernel where the mtk_drm_probe() function registers an OVL adaptor platform device using platform_device_register_data(). If subsequent initialization fails, the error handling path releases DRM resources but does not unregister the already registered OVL adaptor device, causing a platform device leak. Similarly, the normal remove path leaves the device registered after the DRM driver is unbound. The fix involves tracking whether the OVL adaptor was successfully registered and ensuring it is unregistered both on probe failure and during normal removal. This issue was identified through static analysis and confirmed by manual review.

The vulnerability causes a platform device leak in the Linux kernel's drm/mediatek driver, which could lead to resource leakage and potentially affect system stability or resource management. There is no indication of direct security compromise or exploitation in the wild.

A fix has been implemented to track and unregister the OVL adaptor platform device properly during probe failure and normal removal. Users should apply the official Linux kernel patch that addresses this issue. Since this is a kernel-level fix, updating to a kernel version containing this patch is recommended.