CVE Database›Document archive›CVE-2026-45978

CVE-2026-45978

kernel: staging: greybus: lights: avoid NULL deref

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 27, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's Greybus Lights subsystem. This vulnerability occurs when the gb_lights_light_config() function attempts to store a channel count before successfully allocating the corresponding channels array. If the memory allocation fails, a subsequent cleanup operation can try to access a non-existent memory location, leading to a null pointer dereference. This can result in a system crash, causing a Denial of Service (DoS) for affected systems.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference