PT-2026-37610
CVE-2026-43270
·
Published
2025-10-08
·
Updated
2026-10-13
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A reference leak exists in the Linux kernel within the mtk-mdp media component. The
vpu get plat device() function, called during mtk mdp probe(), increases the reference count of the returned platform device, but this count is not properly decreased in mtk mdp remove(), leading to a leak.Recommendations
Add the
platform device put() function to mtk mdp remove() to ensure the platform device reference count is correctly decremented. Found an issue in the description? Have something to add? Feel free to write us 👾