NetSight
IP …
medium5.5

CVE-2026-45978

In the Linux kernel, the following vulnerability has been resolved: staging: greybus: lights: avoid NULL deref gb_lights_light_config() stores channel_count be…

Impact

In the Linux kernel, the following vulnerability has been resolved: staging: greybus: lights: avoid NULL deref gb_lights_light_config() stores channel_count before allocating the channels array. If kcalloc() fails, gb_lights_release() iterates the non-zero count and dereferences light->channels, which is NULL. Allocate channels first and only then publish channels_count so the cleanup path can't walk a NULL pointer.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.9 before 5.10.252
from 5.11 before 5.15.202
from 5.16 before 6.1.165
from 6.2 before 6.6.128
from 6.7 before 6.12.75
from 6.13 before 6.18.14

Weakness classification

CWE-476

References