CVE-2026-23039: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix NULL fb and crtc dereferences on USB disconnect On disconnect drm_atomic_helper_disable_all() is called which sets both the fb and crtc for a plane to NULL before invoking a commit. This causes a kernel oops on every display disconnect. Add guards for those dereferences.

Засегнати продукти

• Linux Linux: 73cfd166e045769a1b42d36897accaa6e06b8102 преди a255ec07f91d4c73a361a28b7a3d82f5710245f1; 73cfd166e045769a1b42d36897accaa6e06b8102 преди dc2d5ddb193e363187bae2ad358245642d2721fb
• Linux Linux: 6.18; преди 6.18; 6.18.7 до 6.18.*; 6.19 до *

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-23039
• https://nvd.nist.gov/vuln/detail/CVE-2026-23039
• https://git.kernel.org/stable/c/a255ec07f91d4c73a361a28b7a3d82f5710245f1
• https://git.kernel.org/stable/c/dc2d5ddb193e363187bae2ad358245642d2721fb