CVE-2026-45978

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the greybus lights staging component. The function gb lights light config() stores the channel count before the channels array is allocated. If the kcalloc() function fails to allocate memory, the gb lights release() function attempts to iterate based on the non-zero count and dereferences light->channels, which is NULL.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.