CVE-2025-39882
kernel: drm/mediatek: fix potential OF node use-after-free
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · September 23, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/mediatek: fix potential OF node use-after-free
The for_each_child_of_node() helper drops the reference it takes to each node as it iterates over children and an explicit of_node_put() is only needed when exiting the loop early.
Drop the recently introduced bogus additional reference count decrement at each iteration that could potentially lead to a use-after-free.
Statement
This vulnerability does not affect Red Hat Enterprise Linux or other Red Hat products because the vulnerable code was never introduced into supported kernel packages. The issue is specific to the MediaTek display driver, which is designed for hardware architectures not supported in enterprise environments. Consequently, Red Hat systems are not exposed to this potential memory management flaw.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified