Description
In the Linux kernel, the following vulnerability has been resolved:

drm/rockchip: analogix_dp: Add missing error check for platform_get_resource()

Add missing error check for platform_get_resource() return value to
prevent NULL pointer dereference when memory resource is not available.
Published: 2026-08-10
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

In the Linux kernel’s Rockchip DRM driver for Analogix DP displays, a missing error check allows the driver to dereference a NULL pointer returned by platform_get_resource(). When the memory resource is unavailable, the unconditionally used pointer causes a kernel panic, leading to a denial of service on the affected system.

Affected Systems

The vulnerability affects any Linux kernel installation that includes the analogix_dp module within the Rockchip DRM stack. Devices that rely on Analogix DP output on Rockchip SoCs may be impacted. Because the advisory does not specify exact kernel versions, any kernel tree with the unpatched driver should be considered vulnerable.

Risk and Exploitability

No EPSS score is available and the issue is not listed in CISA KEV. The CVSS score is not provided, but a crash would destabilize the kernel. Exploitation would likely involve a configuration or boot-time scenario that causes the driver to miss a memory resource, possibly through a crafted device tree or by disabling the resource. While there is no known public exploitation, the risk is moderate until a patched kernel is deployed.

Generated by OpenCVE AI on August 10, 2026 at 17:17 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the kernel to a version that includes the patch correcting the null-pointer check.
  • If an upgrade is not possible, temporarily disable or prevent loading the analogix_dp module during boot.
  • As a local workaround, modify the driver source in your kernel tree to add a NULL check around platform_get_resource() before using the pointer or to skip the resource acquisition when a valid pointer is not returned.

Generated by OpenCVE AI on August 10, 2026 at 17:17 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 10 Aug 2026 17:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476

Mon, 10 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogix_dp: Add missing error check for platform_get_resource() Add missing error check for platform_get_resource() return value to prevent NULL pointer dereference when memory resource is not available.
Title drm/rockchip: analogix_dp: Add missing error check for platform_get_resource()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-10T12:02:14.138Z

Reserved: 2026-07-30T09:28:09.379Z

Link: CVE-2026-68282

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-10T17:30:18Z

Weaknesses