CVE-2026-89884

CVE-2026-89884

published September 16, 2026

CVSS
—
EPSS
0%
Percentile
10.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup

Add the missing sanity check after looking up the SCP to avoid

dereferencing a NULL-pointer in case its driver has not yet been bound.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00209 · 10.5th percentile
Published
2026-09-16T15:16Z
References (5)
https://git.kernel.org/stable/c/28548387d79d14c975e77787ebd1f051265e1396 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/426ead7eed6d6b3c3f0fe0925c112ef73fc87256 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5026f927ef4150ba12da6f1098cf7952d77b14b6 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7cdb1e2d3b0e56385610b6e47e88783e8c4effc4 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/90368323fb244da0504e3da37a182f8e89bcc3b9 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 18 SEP 04:02Z
    EPSS moved — → 0%
    epss
  • 16 SEP 10:31Z
    media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup
    cvelistv5