Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-23039

drm/gud: fix NULL fb and crtc dereferences on USB disconnect

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix NULL fb and crtc dereferences on USB disconnect On disconnect drm_atomic_helper_disable_all() is called which sets both the fb and crtc for a plane to NULL before invoking a commit. This causes a kernel oops on every display disconnect. Add guards for those dereferences.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 73cfd166e045769a1b42d36897accaa6e06b8102 to < a255ec07f91d4c73a361a28b7a3d82f5710245f1affected
  • 73cfd166e045769a1b42d36897accaa6e06b8102 to < dc2d5ddb193e363187bae2ad358245642d2721fbaffected

Linux Linux

Default version status: affected

  • 6.18affected
  • 0 to < 6.18unaffected
  • 6.18.7 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References