---
id: CVE-2026-23366
title: 'drm/client: Do not destroy NULL modes'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/client: Do not destroy NULL modes

  'modes' in drm_client_modeset_probe may fail to kcalloc.  If this
  occurs, we jump to 'out', calling modes_destroy on it, which
  de…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 3039cc0c0653c6e15130a8719c3237329a954670 <
    4e3ca5f82346cc23c0a71f1ceb006115ff6b0745
  - >-
    Linux >= 3039cc0c0653c6e15130a8719c3237329a954670 <
    9aa3e33f0c7f2679ac599a09e3102c8f716a6321
  - >-
    Linux >= 3039cc0c0653c6e15130a8719c3237329a954670 <
    c601fd5414315fc515f746b499110e46272e7243
  - Linux 6.16
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:28:19.326352Z'
published: '2026-03-25'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:33:42.772Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-23366'
references:
  - url: 'https://git.kernel.org/stable/c/4e3ca5f82346cc23c0a71f1ceb006115ff6b0745'
  - url: 'https://git.kernel.org/stable/c/9aa3e33f0c7f2679ac599a09e3102c8f716a6321'
  - url: 'https://git.kernel.org/stable/c/c601fd5414315fc515f746b499110e46272e7243'
tags:
  - cve.org
epss: 0.00125
epssPercentile: 0.02252
ingestedAt: '2026-11-05T22:38:32.126Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/client: Do not destroy NULL modes

'modes' in drm_client_modeset_probe may fail to kcalloc.  If this
occurs, we jump to 'out', calling modes_destroy on it, which
dereferences it.  This may result in a NULL pointer dereference in the
error case.  Prevent that.

## Affected

- `Linux >= 3039cc0c0653c6e15130a8719c3237329a954670 < 4e3ca5f82346cc23c0a71f1ceb006115ff6b0745`
- `Linux >= 3039cc0c0653c6e15130a8719c3237329a954670 < 9aa3e33f0c7f2679ac599a09e3102c8f716a6321`
- `Linux >= 3039cc0c0653c6e15130a8719c3237329a954670 < c601fd5414315fc515f746b499110e46272e7243`
- `Linux 6.16`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.