CVE-2026-23366
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-03-25
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: drm/client: Do not destroy NULL modes 'modes' in drm_client_modeset_probe may fail to kcalloc. If this occurs, we jump to 'out', calling modes_destroy on it, which dereferences it. This may result in a NULL pointer dereference in the error case. Prevent that.
Weakness Classification (1)
Affected Software (13)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 3039cc0c0653c6e15130a8719c3237329a954670 < 4e3ca5f82346cc23c0a71f1ceb006115ff6b0745 |
| Linux | Linux | 3039cc0c0653c6e15130a8719c3237329a954670 < 9aa3e33f0c7f2679ac599a09e3102c8f716a6321 |
| Linux | Linux | 3039cc0c0653c6e15130a8719c3237329a954670 < c601fd5414315fc515f746b499110e46272e7243 |
| Linux | Linux | 6.16 |
| linux | linux_kernel | 6.16.1 – 6.18.17 |
| linux | linux_kernel | 6.16 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |