CVE-2026-23039 – drm/gud: fix NULL fb and crtc dereferences on USB disconnect

CVE ID : CVE-2026-23039

Published : Jan. 31, 2026, 12:16 p.m. | 57 minutes ago

Description : In the Linux kernel, the following vulnerability has been resolved:

drm/gud: fix NULL fb and crtc dereferences on USB disconnect

On disconnect drm_atomic_helper_disable_all() is called which
sets both the fb and crtc for a plane to NULL before invoking a commit.

This causes a kernel oops on every display disconnect.

Add guards for those dereferences.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…