CVE-2026-45978

staging: greybus: lights: avoid NULL deref

published May 27, 2026

CVSS
—
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

staging: greybus: lights: avoid NULL deref

gb_lights_light_config() stores channel_count before allocating the

channels array. If kcalloc() fails, gb_lights_release() iterates the

non-zero count and dereferences light->channels, which is NULL.

Allocate channels first and only then publish channels_count so the

cleanup path can't walk a NULL pointer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.1th percentile
Published
2026-05-27T12:18Z
EPSS history
Timeline
  • 27 MAY 12:18Z
    staging: greybus: lights: avoid NULL deref
    cvelistv5