CVE Database›Document archive›CVE-2025-39882

CVE-2025-39882

kernel: drm/mediatek: fix potential OF node use-after-free

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · September 23, 2025

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/mediatek: fix potential OF node use-after-free

The for_each_child_of_node() helper drops the reference it takes to each node as it iterates over children and an explicit of_node_put() is only needed when exiting the loop early.

Drop the recently introduced bogus additional reference count decrement at each iteration that could potentially lead to a use-after-free.

Statement

This vulnerability does not affect Red Hat Enterprise Linux or other Red Hat products because the vulnerable code was never introduced into supported kernel packages. The issue is specific to the MediaTek display driver, which is designed for hardware architectures not supported in enterprise environments. Consequently, Red Hat systems are not exposed to this potential memory management flaw.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified