CVE-2026-23285

MEDIUM EPSS 2.3%
Published Mar 25, 20263mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Mar 25, 2026 3mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: drbd: fix null-pointer dereference on local read error In drbd_request_endio(), READ_COMPLETED_WITH_ERROR is passed to __req_mod() with a NULL peer_device: __req_mod(req, what, NULL, &m); The READ_COMPLETED_WITH_ERROR handler then unconditionally passes this NULL peer_device to drbd_set_out_of_sync(), which dereferences it, causing a null-pointer dereference. Fix this by obtaining the peer_device via first_peer_device(device), matching how drbd_req_destroy() handles the same situation.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
2.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 5

VendorProductVersionRange
linuxlinux_kernel*≥6.4  –  <6.6.130
linuxlinux_kernel*≥6.7  –  <6.12.77
linuxlinux_kernel*≥6.13  –  <6.18.17
linuxlinux_kernel*≥6.19  –  <6.19.7
linuxlinux_kernel7.0any

References 5

  • git.kernel.org https://git.kernel.org/stable/c/0d195d3b205ca90db30d70d09d7bb6909aac178f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1e906c08594c8f9a6a524f38ede2c4e051196106
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4e8935053ba389ae8d6685c10854d8021931bd89
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6f1d1614f841d91a4169db65812ffd1271735b42
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/91df51d2df0ca4fd3281f73626341563d64a98a5
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/0d195d3b205ca90db30d70d09d7bb6909aac178f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1e906c08594c8f9a6a524f38ede2c4e051196106
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4e8935053ba389ae8d6685c10854d8021931bd89
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6f1d1614f841d91a4169db65812ffd1271735b42
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/91df51d2df0ca4fd3281f73626341563d64a98a5
    Patch