Riskcovery

CVE-2026-23039

drm/gud: fix NULL fb and crtc dereferences on USB disconnect

State
Published
Severity
Not scored
Published
Jan 31, 2026
Updated
May 11, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/gud: fix NULL fb and crtc dereferences on USB disconnect

On disconnect drm_atomic_helper_disable_all() is called which sets both the fb and crtc for a plane to NULL before invoking a commit.

This causes a kernel oops on every display disconnect.

Add guards for those dereferences.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 73cfd166e045769a1b42d36897accaa6e06b8102 to before a255ec07f91d4c73a361a28b7a3d82f5710245f1Affected
  • 73cfd166e045769a1b42d36897accaa6e06b8102 to before dc2d5ddb193e363187bae2ad358245642d2721fbAffected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.7 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.