CVE-2026-23366

medium

Description

In the Linux kernel, the following vulnerability has been resolved: drm/client: Do not destroy NULL modes 'modes' in drm_client_modeset_probe may fail to kcalloc. If this occurs, we jump to 'out', calling modes_destroy on it, which dereferences it. This may result in a NULL pointer dereference in the error case. Prevent that.

References

https://git.kernel.org/stable/c/c601fd5414315fc515f746b499110e46272e7243

https://git.kernel.org/stable/c/9aa3e33f0c7f2679ac599a09e3102c8f716a6321

https://git.kernel.org/stable/c/4e3ca5f82346cc23c0a71f1ceb006115ff6b0745

Details

Source: Mitre, NVD

Published: 2026-03-25

Updated: 2026-03-25

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium

EPSS

EPSS: 0.00017