What’s Vulnerable › Vulnerabilities

CVE-2026-89884: media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-16 · updated 2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup Add the missing sanity check after looking up the SCP to avoid dereferencing a NULL-pointer in case its driver has not yet been bound.

Affected products

• Linux: 6.1 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/28548387d79d14c975e77787ebd1f051265e1396
• https://git.kernel.org/stable/c/426ead7eed6d6b3c3f0fe0925c112ef73fc87256
• https://git.kernel.org/stable/c/5026f927ef4150ba12da6f1098cf7952d77b14b6
• https://git.kernel.org/stable/c/7cdb1e2d3b0e56385610b6e47e88783e8c4effc4
• https://git.kernel.org/stable/c/90368323fb244da0504e3da37a182f8e89bcc3b9
• https://git.kernel.org/stable/c/c49e8097815463199f42304438038e90b02ba7c5

Get alerted when CVE-2026-89884 or the next vulnerability affects your stack