CVE-2026-23285: drbd: fix null-pointer dereference on local read error
drbd: fix null-pointer dereference on local read error
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Compensating control
In drbd_request_endio(), obtain the peer_device via first_peer_device(device) before passing it to __req_mod() for READ_COMPLETED_WITH_ERROR, matching how drbd_req_destroy() handles the situation.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23285?
CVE-2026-23285 is classified as a medium severity vulnerability due to its potential for causing system instability.
How do I fix CVE-2026-23285?
To fix CVE-2026-23285, you should update your Linux kernel to the latest stable version that includes the security patch.
What systems are affected by CVE-2026-23285?
CVE-2026-23285 affects various versions of the Linux kernel, particularly those utilizing DRBD (Distributed Replicated Block Device).
What type of vulnerability is CVE-2026-23285?
CVE-2026-23285 is a null-pointer dereference vulnerability that can lead to a potential denial of service.
Can CVE-2026-23285 be exploited remotely?
CVE-2026-23285 is not typically considered a remote exploit but rather an issue that could be triggered by local read errors.