CVE-2026-23366 in Linux Kernel
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/client: Do not destroy NULL modes 'modes' in drm_client_modeset_probe may fail to kcalloc. If this occurs, we jump to 'out', calling modes_destroy on it, which dereferences it. This may result in a NULL pointer dereference in the error case. Prevent that.
Responsible
Linux
Reservation
01/13/2026
Disclosure
03/25/2026
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 353095 | Linux Kernel drm_client_modeset_probe null pointer dereference | 476 | Not defined | Official fix | CVE-2026-23366 |