CVE-2026-45978

NONE
CVSS v3
CVSS v2
0.03% EPSS (exploit probability)
CWE

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: greybus: lights: avoid NULL deref

gb_lights_light_config() stores channel_count before allocating the
channels array. If kcalloc() fails, gb_lights_release() iterates the
non-zero count and dereferences light->channels, which is NULL.

Allocate channels first and only then publish channels_count so the
cleanup path can't walk a NULL pointer.

Affected routers (0)

No routers currently mapped to this CVE in our database.

External references