CVE-2026-23132
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
14/02/2026
Last modified:
17/03/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/bridge: synopsys: dw-dp: fix error paths of dw_dp_bind<br />
<br />
Fix several issues in dw_dp_bind() error handling:<br />
<br />
1. Missing return after drm_bridge_attach() failure - the function<br />
continued execution instead of returning an error.<br />
<br />
2. Resource leak: drm_dp_aux_register() is not a devm function, so<br />
drm_dp_aux_unregister() must be called on all error paths after<br />
aux registration succeeds. This affects errors from:<br />
- drm_bridge_attach()<br />
- phy_init()<br />
- devm_add_action_or_reset()<br />
- platform_get_irq()<br />
- devm_request_threaded_irq()<br />
<br />
3. Bug fix: platform_get_irq() returns the IRQ number or a negative<br />
error code, but the error path was returning ERR_PTR(ret) instead<br />
of ERR_PTR(dp->irq).<br />
<br />
Use a goto label for cleanup to ensure consistent error handling.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.18 (including) | 6.18.8 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page



