CVE-2026-23039
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix NULL fb and crtc dereferences on USB disconnect On disconnect drm_atomic_helper_disable_all() is called which sets both the fb and crtc for a plane to NULL before invoking a commit. This causes a kernel oops on every display disconnect. Add guards for those dereferences.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedJan 31, 2026
First seenJan 31, 2026
How to fix
Update
- Linux Linuxa255ec07f91d4c73a361a28b7a3d82f5710245f1, dc2d5ddb193e363187bae2ad358245642d2721fb or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 73cfd166e045769a1b42d36897accaa6e06b8102 ≤ v < a255ec07f91d4c73a361a28b7a3d82f5710245f1, 73cfd166e045769a1b42d36897accaa6e06b8102 ≤ v < dc2d5ddb193e363187bae2ad358245642d2721fb, 6.18 | a255ec07f91d4c73a361a28b7a3d82f5710245f1, dc2d5ddb193e363187bae2ad358245642d2721fb |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.