Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1110 CNY

100%
Buy Us a Coffee

CVE-2026-43270— media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()

AI Predicted 3.3 Difficulty: Moderate EPSS 0.01% · P2

Affected Version Matrix 18

VendorProductVersion RangeStatus
LinuxLinuxc8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a< 403b7c757ac9f6b2ffb7d00ff4795a245f5e8911affected
c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a< dd530e29bd514d7187b3e2df8eb2107419c7988faffected
c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a< c44beed2e5caf2cbbe651432baa3a129f18b0169affected
c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a< 564fd3a63efc3ebbdb5d0a8fc7c0d3f753fbbd5daffected
c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a< 4f2a51433a3a65d16975d1e32052d80656da077daffected
c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a< a62ba5aa9ee95fd953583e95e519badf0b76ecf3affected
c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a< 2d93758f42a57f3485534eab858b308e41653de4affected
c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a< f128bab57b8018e526b7eda854ca20069863af47affected
… +10 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-43270

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() In mtk_mdp_probe(), vpu_get_plat_device() increases the reference count of the returned platform device. Add platform_device_put() to prevent reference leak.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于mtk-mdp驱动中mtk_mdp_remove函数未释放vpu_get_plat_device返回的平台设备引用，可能导致引用泄漏。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux c8eb2d7e8202fd9cb912f5d33cc34ede66dcb24a ~ 403b7c757ac9f6b2ffb7d00ff4795a245f5e8911 -
LinuxLinux 4.10 -

II. Public POCs for CVE-2026-43270

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-43270

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-43270 (8)

Same Patch Batch · Linux · 2026-05-06 · 225 CVEs total

CVE-2026-431989.8 CRITICALtcp: fix potential race in tcp_v6_syn_recv_sock()
CVE-2026-432089.8 CRITICALnet: do not pass flow_id to set_rps_cpu()
CVE-2026-431259.8 CRITICALdlm: validate length in dlm_search_rsb_tree
CVE-2026-431859.8 CRITICALksmbd: fix signededness bug in smb_direct_prepare_negotiation()
CVE-2026-431869.8 CRITICALipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()
CVE-2026-431149.4 CRITICALnetfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry
CVE-2026-431979.1 CRITICALnetconsole: avoid OOB reads, msg is not nul-terminated
CVE-2026-431179.1 CRITICALbtrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file()
CVE-2026-430839.1 CRITICALnet: ioam6: fix OOB and missing lock
CVE-2026-432838.8 HIGHnet: ethernet: ec_bhf: Fix dma_free_coherent() dma handle
CVE-2026-431138.8 HIGHwifi: wl1251: validate packet IDs before indexing tx_frames
CVE-2026-431128.8 HIGHfs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
CVE-2026-431108.8 HIGHwifi: brcmfmac: validate bsscfg indices in IF events
CVE-2026-431728.8 HIGHwifi: iwlwifi: fix 22000 series SMEM parsing
CVE-2026-431768.8 HIGHwifi: rtw89: pci: validate release report content before using for RTL8922DE
CVE-2026-432158.8 HIGHcifs: Fix locking usage for tcon fields
CVE-2026-432328.8 HIGHnet: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets
CVE-2026-431588.8 HIGHxfs: fix freemap adjustments when adding xattrs to leaf blocks
CVE-2026-431878.8 HIGHxfs: delete attr leaf freemap entries when empty
CVE-2026-432498.8 HIGH9p/xen: protect xen_9pfs_front_free against concurrent calls

Showing top 20 of 225 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-43270

No comments yet

Leave a comment