CVE-2026-23285

drbd: fix null-pointer dereference on local read error

published March 25, 2026

CVSS
—
EPSS
0%
Percentile
2.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drbd: fix null-pointer dereference on local read error

In drbd_request_endio(), READ_COMPLETED_WITH_ERROR is passed to

__req_mod() with a NULL peer_device:

__req_mod(req, what, NULL, &m);

The READ_COMPLETED_WITH_ERROR handler then unconditionally passes this

NULL peer_device to drbd_set_out_of_sync(), which dereferences it,

causing a null-pointer dereference.

Fix this by obtaining the peer_device via first_peer_device(device),

matching how drbd_req_destroy() handles the same situation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00127 · 2.1th percentile
Published
2026-03-25T10:26Z
EPSS history
Timeline
  • 25 MAR 10:26Z
    drbd: fix null-pointer dereference on local read error
    cvelistv5