Reference Leak Vulnerability in Linux Kernel Affecting Media Components

CVE-2026-43270

What is CVE-2026-43270?

A reference leak vulnerability in the Linux kernel's media subsystem has been identified, specifically within the mtk-mdp component. This issue arises in the mtk_mdp_probe() function, where the reference count for a platform device is improperly managed. When vpu_get_plat_device() is invoked, it increments the reference count without a corresponding release—resulting in a reference leak. To address this, the implementation of platform_device_put() is necessary to ensure proper reference handling and prevent the leak.

References