CVE-2026-68236

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the dm update crtc state() function, the skip modeset path releases the new stream variable using dc stream release() but fails to set the pointer to NULL. If a subsequent error occurs, such as a color management failure, the error handling path invokes dc stream release() again on the same dangling pointer. This leads to a double release and a potential use-after-free, which occurs when a program continues to use a pointer after it has been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.