CVE-2026-80658

A flaw was found in the drm/rockchip: dw_dp component of the Linux kernel. This vulnerability occurs when the platform driver's remove() callback attempts to access driver data before it has been properly initialized by the bind() callback. This can lead to a null pointer dereference, potentially causing a system crash and resulting in a Denial of Service (DoS).

A null pointer dereference flaw was found in the Linux kernel's drm/rockchip dw_dp DisplayPort driver, rated moderate severity by Red Hat. The platform driver's remove() callback accesses driver data that is only initialized when the component bind() callback runs platform_set_drvdata(); if an unrelated error causes component_bind_all() to be skipped during rockchip_drm_bind(), that driver data is never set, and a subsequent device removal dereferences a NULL pointer. On a system using this hardware, this leads to a kernel panic and a local denial of service; no confidentiality or integrity impact is expected. All Red Hat Enterprise Linux and RHEL for Automotive kernel streams are marked not affected for this flaw because the vulnerable code is not present in the kernels Red Hat ships.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.