PT-2026-8127 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-02-14 · CVE-2026-23132

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the drm/bridge subsystem, specifically within the dw dp bind() function, related to error handling. Several issues were identified: missing return statements after drm bridge attach() failure, resource leaks due to improper unregistration of auxiliary resources, and incorrect error handling when retrieving IRQ numbers using platform get irq(). These issues could lead to system instability or potential security implications. The fix involves using a goto label for consistent cleanup and error handling. The drm dp aux register() function is not a devm function, so drm dp aux unregister() must be called on all error paths after aux registration succeeds.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23132

Affected Products

Linux Kernel

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23132.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-23132 · Vendor Advisory
• https://git.kernel.org/stable/c/569ed6a73e927a34cae4ae6de1464c0737a5ec44 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23132 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-23132 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23132 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23132 · Security Note
• https://git.kernel.org/stable/c/1a0f69e3c28477b97d3609569b7e8feb4b6162e8 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-23132 · Security Note
• https://ubuntu.com/security/CVE-2026-23132 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/2022702089693200460 · Twitter Post
• https://git.kernel.org/linus/1a0f69e3c28477b97d3609569b7e8feb4b6162e8 · Note
• https://t.me/cveNotify/152041 · Telegram Post