Answer in brief
CVE-2026-23366 records a Unknown severity vulnerability in drm/client: Do not destroy NULL modes. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=3039cc0c0653c6e15130a8719c3237329a954670 <4e3ca5f82346cc23c0a71f1ceb006115ff6b0745 || >=3039cc0c0653c6e15130a8719c3237329a954670 <9aa3e33f0c7f2679ac599a09e3102c8f716a6321 || >=3039cc0c0653c6e15130a8719c3237329a954670 <c601fd5414315fc515f746b499110e46272e7243 | 4e3ca5f82346cc23c0a71f1ceb006115ff6b0745, 9aa3e33f0c7f2679ac599a09e3102c8f716a6321, c601fd5414315fc515f746b499110e46272e7243 |
| Linux/Linuxgeneric | 6.16 | Not reported |
Published upstream
Mar 25, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Nov 5, 2026
In the Linux kernel, the following vulnerability has been resolved: drm/client: Do not destroy NULL modes 'modes' in drm_client_modeset_probe may fail to kcalloc. If this occurs, we jump to 'out', calling modes_destroy on it, which dereferences it. This may result in a NULL pointer dereference in the error case. Prevent that.
Quoted source text, attributed separately from HOL analysis.