CVE-2026-53066
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/sun4i: backend: fix error pointer dereference
The function drm_atomic_get_plane_state() can return an error pointer
and is not checked for it. Add error pointer check.
Detected by Smatch:
drivers/gpu/drm/sun4i/sun4i_backend.c:496 sun4i_backend_atomic_check() error:
'plane_state' dereferencing possible ERR_PTR()
Summary dbcve.org
In the Linux kernel DRM driver for Allwinner sun4i graphics, the function sun4i_backend_atomic_check() calls drm_atomic_get_plane_state() but fails to check if the returned value is an error pointer before dereferencing it. This can lead to kernel panic or undefined behavior when an ERR_PTR is dereferenced.
Mitigation
Add an error pointer check immediately after the drm_atomic_get_plane_state() call in sun4i_backend_atomic_check() and return the error if the result is an ERR_PTR.