What’s Vulnerable › Vulnerabilities

CVE-2026-23366: drm/client: Do not destroy NULL modes

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-03-25 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: drm/client: Do not destroy NULL modes 'modes' in drm_client_modeset_probe may fail to kcalloc. If this occurs, we jump to 'out', calling modes_destroy on it, which dereferences it. This may result in a NULL pointer dereference in the error case. Prevent that.

Affected products

• Linux kernel: from 6.16.1 before 6.18.17; from 6.19 before 6.19.7; 6.16, 7.0-rc1, 7.0-rc2, 7.0-rc3, 7.0-rc4, 7.0-rc5 (+2) — fixed in 6.18.17, 6.19.7

How to fix

Upgrade to a fixed version: Linux kernel 6.18.17, 6.19.7. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/4e3ca5f82346cc23c0a71f1ceb006115ff6b0745
• https://git.kernel.org/stable/c/9aa3e33f0c7f2679ac599a09e3102c8f716a6321
• https://git.kernel.org/stable/c/c601fd5414315fc515f746b499110e46272e7243

Get alerted when CVE-2026-23366 or the next vulnerability affects your stack