CVE-2026-23132

drm/bridge: synopsys: dw-dp: fix error paths of dw_dp_bind

State
Published
Severity
Not scored
Published
Feb 14, 2026
Updated
May 11, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/bridge: synopsys: dw-dp: fix error paths of dw_dp_bind

Fix several issues in dw_dp_bind() error handling:

1. Missing return after drm_bridge_attach() failure - the function continued execution instead of returning an error.

2. Resource leak: drm_dp_aux_register() is not a devm function, so drm_dp_aux_unregister() must be called on all error paths after aux registration succeeds. This affects errors from: - drm_bridge_attach() - phy_init() - devm_add_action_or_reset() - platform_get_irq() - devm_request_threaded_irq()

3. Bug fix: platform_get_irq() returns the IRQ number or a negative error code, but the error path was returning ERR_PTR(ret) instead of ERR_PTR(dp->irq).

Use a goto label for cleanup to ensure consistent error handling.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 86eecc3a9c2e06462f6a273fcd24150b6da787de to before 569ed6a73e927a34cae4ae6de1464c0737a5ec44Affected
  • 86eecc3a9c2e06462f6a273fcd24150b6da787de to before 1a0f69e3c28477b97d3609569b7e8feb4b6162e8Affected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.8 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.