CVE-2026-80658

CVE-2026-80658

published August 28, 2026

CVSS
—
EPSS
0%
Percentile
10.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove()

Attempting to access driver data in the platform driver ->remove()

callback may lead to a null pointer dereference since there is no

guaranty that the component ->bind() callback invoking

platform_set_drvdata() was executed.

A common scenario is when Rockchip DRM driver didn't manage to run

component_bind_all() because of an (unrelated) error causing early

return from rockchip_drm_bind().

Drop the unnecessary call to platform_get_drvdata() and, instead,

reference the target device structure via platform_device.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.2th percentile
Published
2026-08-28T12:16Z
References (3)
EPSS history
Timeline
  • 28 AUG 06:49Z
    drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove()
    cvelistv5