PT-2026-8127 · Linux · Linux Kernel

CVE-2026-23132

·

Published

2026-01-01

·

Updated

2026-02-19

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw in the drm/bridge subsystem, specifically within the dw dp bind() function, related to error handling. Several issues were identified: missing return statements after drm bridge attach() failure, resource leaks due to improper unregistration of auxiliary resources, and incorrect error handling when retrieving IRQ numbers using platform get irq(). These issues could lead to system instability or potential security implications. The fix involves using a goto label for consistent cleanup and error handling. The drm dp aux register() function is not a devm function, so drm dp aux unregister() must be called on all error paths after aux registration succeeds.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Release of Resource after Effective Lifetime

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-12444
CVE-2026-23132

Affected Products

Linux Kernel