Riskcovery

CVE-2026-23366

drm/client: Do not destroy NULL modes

State
Published
Severity
Not scored
Published
Mar 25, 2026
Updated
May 11, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/client: Do not destroy NULL modes

'modes' in drm_client_modeset_probe may fail to kcalloc. If this occurs, we jump to 'out', calling modes_destroy on it, which dereferences it. This may result in a NULL pointer dereference in the error case. Prevent that.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3039cc0c0653c6e15130a8719c3237329a954670 to before 4e3ca5f82346cc23c0a71f1ceb006115ff6b0745Affected
  • 3039cc0c0653c6e15130a8719c3237329a954670 to before 9aa3e33f0c7f2679ac599a09e3102c8f716a6321Affected
  • 3039cc0c0653c6e15130a8719c3237329a954670 to before c601fd5414315fc515f746b499110e46272e7243Affected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.18.17 through 6.18.*Not affected
  • 6.19.7 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.