CVE-2026-23132: drm/bridge: synopsys: dw-dp: fix error paths of dw_dp_bind
In the Linux kernel, the following vulnerability has been resolved:
drm/bridge: synopsys: dw-dp: fix error paths of dwdpbind
Fix several issues in dwdpbind() error handling:
1. Missing return after drmbridgeattach() failure - the function continued execution instead of returning an error.
2. Resource leak: drmdpauxregister() is not a devm function, so drmdpauxunregister() must be called on all error paths after aux registration succeeds. This affects errors from: - drmbridgeattach() - phyinit() - devmaddactionorreset() - platformgetirq() - devmrequestthreadedirq()
3. Bug fix: platformgetirq() returns the IRQ number or a negative error code, but the error path was returning ERRPTR(ret) instead of ERRPTR(dp->irq).
Use a goto label for cleanup to ensure consistent error handling.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23132?
CVE-2026-23132 is classified as a medium severity vulnerability within the Linux kernel.
How do I fix CVE-2026-23132?
To resolve CVE-2026-23132, update the Linux kernel to the latest patched version provided by your distribution.
What is the impact of CVE-2026-23132?
The impact of CVE-2026-23132 can lead to potential denial of service or stability issues in systems using the affected Linux kernel.
Which versions of the Linux kernel are affected by CVE-2026-23132?
CVE-2026-23132 affects multiple versions of the Linux kernel prior to the application of the security patch.
Who should be concerned about CVE-2026-23132?
System administrators and users running vulnerable versions of the Linux kernel should take necessary precautions regarding CVE-2026-23132.