{"id":"CVE-2026-23237","title":"platform/x86: classmate-laptop: Add missing NULL pointer checks","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: classmate-laptop: Add missing NULL pointer checks\n\nIn a few places in the Classmate laptop driver, code using the accel\nobject may run before that object'…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 529aa8cb0a59367d08883f818e8c47028e819d0d < 993708fc18d0d0919db438361b4e8c1f980a8d1b","Linux >= 529aa8cb0a59367d08883f818e8c47028e819d0d < af673209d43b46257540997aba042b90ef3258c0","Linux >= 529aa8cb0a59367d08883f818e8c47028e819d0d < eb214804f03c829decf10998e9b7dd26f4c8ab9e","Linux >= 529aa8cb0a59367d08883f818e8c47028e819d0d < 9cf4b9b8ad09d6e05307abc4e951cabdff4be652","Linux >= 529aa8cb0a59367d08883f818e8c47028e819d0d < da6e06a5fdbabea3870d18c227734b5dea5b3be6","Linux >= 529aa8cb0a59367d08883f818e8c47028e819d0d < 97528b1622b8f129574d29a571c32a3c85eafa3c","Linux >= 529aa8cb0a59367d08883f818e8c47028e819d0d < fe747d7112283f47169e9c16e751179a9b38611e","Linux 2.6.33"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T21:22:49.803280Z"},"published":"2026-03-04","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:23:23.121Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-23237","references":[{"url":"https://git.kernel.org/stable/c/993708fc18d0d0919db438361b4e8c1f980a8d1b"},{"url":"https://git.kernel.org/stable/c/af673209d43b46257540997aba042b90ef3258c0"},{"url":"https://git.kernel.org/stable/c/eb214804f03c829decf10998e9b7dd26f4c8ab9e"},{"url":"https://git.kernel.org/stable/c/9cf4b9b8ad09d6e05307abc4e951cabdff4be652"},{"url":"https://git.kernel.org/stable/c/da6e06a5fdbabea3870d18c227734b5dea5b3be6"},{"url":"https://git.kernel.org/stable/c/97528b1622b8f129574d29a571c32a3c85eafa3c"},{"url":"https://git.kernel.org/stable/c/fe747d7112283f47169e9c16e751179a9b38611e"}],"tags":["cve.org"],"epss":0.00215,"epssPercentile":0.11994,"ingestedAt":"2026-11-05T22:38:32.088Z","slug":"CVE-2026-23237","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: classmate-laptop: Add missing NULL pointer checks\n\nIn a few places in the Classmate laptop driver, code using the accel\nobject may run before that object's address is stored in the driver\ndata of the input device using it.\n\nFor example, cmpc_accel_sensitivity_store_v4() is the \"show\" method\nof cmpc_accel_sensitivity_attr_v4 which is added in cmpc_accel_add_v4(),\nbefore calling dev_set_drvdata() for inputdev->dev.  If the sysfs\nattribute is accessed prematurely, the dev_get_drvdata(&inputdev->dev)\ncall in in cmpc_accel_sensitivity_store_v4() returns NULL which\nleads to a NULL pointer dereference going forward.\n\nMoreover, sysfs attributes using the input device are added before\ninitializing that device by cmpc_add_acpi_notify_device() and if one\nof them is accessed before running that function, a NULL pointer\ndereference will occur.\n\nFor example, cmpc_accel_sensitivity_attr_v4 is added before calling\ncmpc_add_acpi_notify_device() and if it is read prematurely, the\ndev_get_drvdata(&acpi->dev) call in cmpc_accel_sensitivity_show_v4()\nreturns NULL which leads to a NULL pointer dereference going forward.\n\nFix this by adding NULL pointer checks in all of the relevant places.\n\n## Affected\n\n- `Linux >= 529aa8cb0a59367d08883f818e8c47028e819d0d < 993708fc18d0d0919db438361b4e8c1f980a8d1b`\n- `Linux >= 529aa8cb0a59367d08883f818e8c47028e819d0d < af673209d43b46257540997aba042b90ef3258c0`\n- `Linux >= 529aa8cb0a59367d08883f818e8c47028e819d0d < eb214804f03c829decf10998e9b7dd26f4c8ab9e`\n- `Linux >= 529aa8cb0a59367d08883f818e8c47028e819d0d < 9cf4b9b8ad09d6e05307abc4e951cabdff4be652`\n- `Linux >= 529aa8cb0a59367d08883f818e8c47028e819d0d < da6e06a5fdbabea3870d18c227734b5dea5b3be6`\n- `Linux >= 529aa8cb0a59367d08883f818e8c47028e819d0d < 97528b1622b8f129574d29a571c32a3c85eafa3c`\n- `Linux >= 529aa8cb0a59367d08883f818e8c47028e819d0d < fe747d7112283f47169e9c16e751179a9b38611e`\n- `Linux 2.6.33`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}