In the Linux kernel, the following vulnerability has been resolved:
drm/mediatek: fix potential OF node use-after-free
The for_each_child_of_node() helper drops the reference it takes to each node as it iterates over children and an explicit of_node_put() is only needed when exiting the loop early.
Drop the recently introduced bogus additional reference count decrement at each iteration that could potentially lead to a use-after-free.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade dtb-socionextUpgrade kernel-devel-azureUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade kernel-sourceUpgrade reiserfs-kmp-64kbUpgrade dtb-exynosUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-64kb-extraUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade dtb-nvidiaUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade dlm-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade dtb-qcomUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-debugUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade dtb-renesasUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-appleUpgrade kernel-64kbUpgrade kernel-rt-develUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-source-azureUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade kernel-rt-livepatchUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade kselftests-kmp-rtUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-debug-develUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-zfcpdumpUpgrade dtb-caviumUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-symsUpgrade kernel-default-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-default-optional | Dec 5, 2025 | Oct 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub