{"id":"CVE-2026-23366","title":"drm/client: Do not destroy NULL modes","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/client: Do not destroy NULL modes\n\n'modes' in drm_client_modeset_probe may fail to kcalloc.  If this\noccurs, we jump to 'out', calling modes_destroy on it, which\nde…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 3039cc0c0653c6e15130a8719c3237329a954670 < 4e3ca5f82346cc23c0a71f1ceb006115ff6b0745","Linux >= 3039cc0c0653c6e15130a8719c3237329a954670 < 9aa3e33f0c7f2679ac599a09e3102c8f716a6321","Linux >= 3039cc0c0653c6e15130a8719c3237329a954670 < c601fd5414315fc515f746b499110e46272e7243","Linux 6.16"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T21:28:19.326352Z"},"published":"2026-03-25","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:33:42.772Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-23366","references":[{"url":"https://git.kernel.org/stable/c/4e3ca5f82346cc23c0a71f1ceb006115ff6b0745"},{"url":"https://git.kernel.org/stable/c/9aa3e33f0c7f2679ac599a09e3102c8f716a6321"},{"url":"https://git.kernel.org/stable/c/c601fd5414315fc515f746b499110e46272e7243"}],"tags":["cve.org"],"epss":0.00125,"epssPercentile":0.02252,"ingestedAt":"2026-11-05T22:38:32.126Z","slug":"CVE-2026-23366","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/client: Do not destroy NULL modes\n\n'modes' in drm_client_modeset_probe may fail to kcalloc.  If this\noccurs, we jump to 'out', calling modes_destroy on it, which\ndereferences it.  This may result in a NULL pointer dereference in the\nerror case.  Prevent that.\n\n## Affected\n\n- `Linux >= 3039cc0c0653c6e15130a8719c3237329a954670 < 4e3ca5f82346cc23c0a71f1ceb006115ff6b0745`\n- `Linux >= 3039cc0c0653c6e15130a8719c3237329a954670 < 9aa3e33f0c7f2679ac599a09e3102c8f716a6321`\n- `Linux >= 3039cc0c0653c6e15130a8719c3237329a954670 < c601fd5414315fc515f746b499110e46272e7243`\n- `Linux 6.16`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}