CVE-2026-68282
kernel: drm/rockchip: analogix_dp: Add missing error check for platform_get_resource()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 10, 2026
Updated · August 31, 2026
Description
A flaw was found in the Linux kernel, specifically within the drm/rockchip: analogix_dp driver. This vulnerability occurs due to a missing error check for the return value of the platform_get_resource() function. If a memory resource is unavailable, this oversight can lead to a NULL pointer dereference, potentially causing system instability or a denial of service (DoS).
Statement
This issue affects Rockchip SoCs using the analogix_dp driver. Missing platform_get_resource() error check leads to NULL dereference. Systems without Rockchip analogix_dp are not affected.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference