PT-2026-27731 · Linux · Linux

Published 2026-03-25 · Updated 2026-03-25 · CVE-2026-23366

Mitre

In the Linux kernel, the following vulnerability has been resolved:

drm/client: Do not destroy NULL modes

'modes' in drm client modeset probe may fail to kcalloc. If this occurs, we jump to 'out', calling modes destroy on it, which dereferences it. This may result in a NULL pointer dereference in the error case. Prevent that.

Related Identifiers

CVE-2026-23366

Affected Products

Linux

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-23366 · Security Note
• https://git.kernel.org/stable/c/c601fd5414315fc515f746b499110e46272e7243 · Note
• https://git.kernel.org/stable/c/9aa3e33f0c7f2679ac599a09e3102c8f716a6321 · Note
• https://git.kernel.org/stable/c/4e3ca5f82346cc23c0a71f1ceb006115ff6b0745 · Note