PT-2026-8127

CVE-2026-23132

·

Published

2026-01-01

·

Updated

2026-02-19

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw in the drm/bridge subsystem, specifically within the dw dp bind() function, related to error handling. Several issues were identified: missing return statements after drm bridge attach() failure, resource leaks due to improper unregistration of auxiliary resources, and incorrect error handling when retrieving IRQ numbers using platform get irq(). These issues could lead to system instability or potential security implications. The fix involves using a goto label for consistent cleanup and error handling. The drm dp aux register() function is not a devm function, so drm dp aux unregister() must be called on all error paths after aux registration succeeds.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾