CVE-2026-45978 — staging: greybus: lights: avoid NULL deref
In the Linux kernel, the following vulnerability has been resolved: staging: greybus: lights: avoid NULL deref gb_lights_light_config() stores channel_count before allocating …
Published: 2026-05-27 · CVSS: Unscored
In the Linux kernel, the following vulnerability has been resolved: staging: greybus: lights: avoid NULL deref gb_lights_light_config() stores channel_count before allocating the channels array. If kcalloc() fails, gb_lights_release() iterates the non-zero count and dereferences light->channels, which is NULL. Allocate channels first and only then publish channels_count so the cleanup path can't walk a NULL pointer.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7