CVE-2026-23132

published 2026-02-14

CVE-2026-23132: In the Linux kernel, the following vulnerability has been resolved: drm/bridge: synopsys: dw-dp: fix error paths of dw_dp_bind Fix several issues in…

Priority P4 17 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

In the Linux kernel, the following vulnerability has been resolved:

drm/bridge: synopsys: dw-dp: fix error paths of dw_dp_bind

Fix several issues in dw_dp_bind() error handling:

1. Missing return after drm_bridge_attach() failure - the function
continued execution instead of returning an error.

2. Resource leak: drm_dp_aux_register() is not a devm function, so
drm_dp_aux_unregister() must be called on all error paths after
aux registration succeeds. This affects errors from:
- drm_bridge_attach()
- phy_init()
- devm_add_action_or_reset()
- platform_get_irq()
- devm_request_threaded_irq()

3. Bug fix: platform_get_irq() returns the IRQ number or a negative
error code, but the error path was returning ERR_PTR(ret) instead
of ERR_PTR(dp->irq).

Use a goto label for cleanup to ensure consistent error handling.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.18.8-1 (forky)	linux 6.18.8-1 (forky)
linux	linux	—	—
linux	linux	>= 86eecc3a9c2e06462f6a273fcd24150b6da787de < 569ed6a73e927a34cae4ae6de1464c0737a5ec44	569ed6a73e927a34cae4ae6de1464c0737a5ec44
linux	linux	>= 86eecc3a9c2e06462f6a273fcd24150b6da787de < 1a0f69e3c28477b97d3609569b7e8feb4b6162e8	1a0f69e3c28477b97d3609569b7e8feb4b6162e8
linux	linux_kernel	—	—
linux	linux_kernel	>= 0 < 6.18.8-1	6.18.8-1
linux	linux_kernel	>= 6.18 < 6.18.8	6.18.8

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 5.5 MEDIUM

vendor_debian 5.5 LOW

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.