{"cve":"CVE-2026-80658","nvd":{"published":"2026-08-28T08:16:50.917","modified":"2026-08-28T08:16:50.917","status":"Received","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove()\n\nAttempting to access driver data in the platform driver ->remove()\ncallback may lead to a null pointer dereference since there is no\nguaranty that the component ->bind() callback invoking\nplatform_set_drvdata() was executed.\n\nA common scenario is when Rockchip DRM driver didn't manage to run\ncomponent_bind_all() because of an (unrelated) error causing early\nreturn from rockchip_drm_bind().\n\nDrop the unnecessary call to platform_get_drvdata() and, instead,\nreference the target device structure via platform_device.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/33bc9fba3ae05863fabe3436ddca2ca4f4939c5e","https://git.kernel.org/stable/c/9456381d8b60bb7dd42f2f04afe5ee4ce6e0bc12","https://git.kernel.org/stable/c/b3ec263a719e0d499bd95d20012d90d7e8641655"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:50:50.842544443+00:00"},"epss":{"cve":"CVE-2026-80658","score":0.00206,"percentile":0.10738,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}