CVE-2026-23039
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
31/01/2026
Last modified:
31/01/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/gud: fix NULL fb and crtc dereferences on USB disconnect<br />
<br />
On disconnect drm_atomic_helper_disable_all() is called which<br />
sets both the fb and crtc for a plane to NULL before invoking a commit.<br />
<br />
This causes a kernel oops on every display disconnect.<br />
<br />
Add guards for those dereferences.