CVE-2026-23039
published 2026-01-31CVE-2026-23039: In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix NULL fb and crtc dereferences on USB disconnect On disconnect…
PriorityP418low5.5
EPSS
0.19%
9.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
drm/gud: fix NULL fb and crtc dereferences on USB disconnect
On disconnect drm_atomic_helper_disable_all() is called which
sets both the fb and crtc for a plane to NULL before invoking a commit.
This causes a kernel oops on every display disconnect.
Add guards for those dereferences.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.18.8-1 (forky) | linux 6.18.8-1 (forky) |
| linux | linux | — | — |
| linux | linux | >= 73cfd166e045769a1b42d36897accaa6e06b8102 < a255ec07f91d4c73a361a28b7a3d82f5710245f1 | a255ec07f91d4c73a361a28b7a3d82f5710245f1 |
| linux | linux | >= 73cfd166e045769a1b42d36897accaa6e06b8102 < dc2d5ddb193e363187bae2ad358245642d2721fb | dc2d5ddb193e363187bae2ad358245642d2721fb |
| linux | linux_kernel | >= 0 < 6.18.8-1 | 6.18.8-1 |
| linux | linux_kernel | >= 6.18.0 < 6.18.7 | 6.18.7 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2026-23039: In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix NULL fb and crtc dereferences on USB disconnect On disconnect drm_ato
osv·2026-01-31
CVE-2026-23039 CVE-2026-23039: In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix NULL fb and crtc dereferences on USB disconnect On disconnect drm_ato
In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix NULL fb and crtc dereferences on USB disconnect On disconnect drm_atomic_helper_disable_all() is called which sets both the fb and crtc for a plane to NULL before invoking a commit. This causes a kernel oops on every display disconnect. Add guards for those dereferences.
GHSA
GHSA-8v58-m3wh-hhg4: In the Linux kernel, the following vulnerability has been resolved:
drm/gud: fix NULL fb and crtc dereferences on USB disconnect
On disconnect drm_a
ghsa_unreviewed·2026-01-31
CVE-2026-23039 GHSA-8v58-m3wh-hhg4: In the Linux kernel, the following vulnerability has been resolved:
drm/gud: fix NULL fb and crtc dereferences on USB disconnect
On disconnect drm_a
In the Linux kernel, the following vulnerability has been resolved:
drm/gud: fix NULL fb and crtc dereferences on USB disconnect
On disconnect drm_atomic_helper_disable_all() is called which
sets both the fb and crtc for a plane to NULL before invoking a commit.
This causes a kernel oops on every display disconnect.
Add guards for those dereferences.
OSV
drm/gud: fix NULL fb and crtc dereferences on USB disconnect
osv·2026-01-31
CVE-2026-23039 drm/gud: fix NULL fb and crtc dereferences on USB disconnect
drm/gud: fix NULL fb and crtc dereferences on USB disconnect
In the Linux kernel, the following vulnerability has been resolved:
drm/gud: fix NULL fb and crtc dereferences on USB disconnect
On disconnect drm_atomic_helper_disable_all() is called which
sets both the fb and crtc for a plane to NULL before invoking a commit.
This causes a kernel oops on every display disconnect.
Add guards for those dereferences.
Red Hat
kernel: drm/gud: fix NULL fb and crtc dereferences on USB disconnect
vendor_redhat·2026-01-31·CVSS 5.5
CVE-2026-23039 [LOW] CWE-476 kernel: drm/gud: fix NULL fb and crtc dereferences on USB disconnect
kernel: drm/gud: fix NULL fb and crtc dereferences on USB disconnect
In the Linux kernel, the following vulnerability has been resolved:
drm/gud: fix NULL fb and crtc dereferences on USB disconnect
On disconnect drm_atomic_helper_disable_all() is called which
sets both the fb and crtc for a plane to NULL before invoking a commit.
This causes a kernel oops on every display disconnect.
Add guards for those dereferences.
A NULL pointer dereference vulnerability was found in the Linux kernel's GUD (Generic USB Display) driver. When a USB display is disconnected, drm_atomic_helper_disable_all() sets the framebuffer and CRTC pointers to NULL before invoking a commit. The driver then attempts to dereference these NULL pointers, causing a kernel crash on every USB display disconnect event.
Stat
Debian
CVE-2026-23039: linux - In the Linux kernel, the following vulnerability has been resolved: drm/gud: fi...
vendor_debian·2026
CVE-2026-23039 [LOW] CVE-2026-23039: linux - In the Linux kernel, the following vulnerability has been resolved: drm/gud: fi...
In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix NULL fb and crtc dereferences on USB disconnect On disconnect drm_atomic_helper_disable_all() is called which sets both the fb and crtc for a plane to NULL before invoking a commit. This causes a kernel oops on every display disconnect. Add guards for those dereferences.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved (fixed in 6.18.8-1)
sid: resolved (fixed in 6.18.8-1)
trixie: resolved
No detection rules found.
No public exploits indexed.
2026-01-31
Published