CVE-2026-45978
kernel: staging: greybus: lights: avoid NULL deref
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 27, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's Greybus Lights subsystem. This vulnerability occurs when the gb_lights_light_config() function attempts to store a channel count before successfully allocating the corresponding channels array. If the memory allocation fails, a subsequent cleanup operation can try to access a non-existent memory location, leading to a null pointer dereference. This can result in a system crash, causing a Denial of Service (DoS) for affected systems.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-476 · NULL Pointer Dereference