CVE-2026-23285Patch(linux / linux_kernel)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch linux linux_kernel systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: drbd: fix null-pointer dereference on local read error In drbd_request_endio(), READ_COMPLETED_WITH_ERROR is passed to __req_mod() with a NULL peer_device: __req_mod(req, what, NULL, &m); The READ_COMPLETED_WITH_ERROR handler then unconditionally passes this NULL peer_device to drbd_set_out_of_sync(), which dereferences it, causing a null-pointer dereference. Fix this by obtaining the peer_device via first_peer_device(device), matching how drbd_req_destroy() handles the same situation.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-476

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-03-26); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
Products
linux_kernel

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-03-26: 1Mentions · 2026-03-31: 1Patch / Workaround · 2026-03-26: 1Technical Details · 2026-03-26: 103-2603-31
Signal classification2 categories
Patch
150.0%
General
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-03-261
Patch1
2026-03-311
General1
Full discourse2 posts
  • CVEarity@CVEarity
    General

    ⚡ New CVE Alert: CVE-2026-23285 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-23285 #CVE-2026-23285 #CVE   #CyberSecurity #InfoSec https://t.co/2qAfvVFrCB

    Post summary

    The tweet merely announces the existence of CVE-2026-23285 without providing any detailed technical information, evidence of exploitation, or remediation guidance.

    0000028
    123 followersView on X
  • WindowsForum@windowsforum
    Patch

    🧯 Microsoft patching a Linux DRBD null-pointer bug is peak “Windows extends to everything” energy. It matters because one local read error can turn into a crash. Yay? https://windowsforum.com/threads/cve-2026-23285-drbd-null-pointer-dereference-on-local-read-error-fix.407516/ #StableBackport #LinuxKernelSecurity #Cve202623285 #Drbd https://t.co/M3ZBpKzQpU

    Post summary

    Microsoft has released a patch for CVE-2026-23285, a null-pointer dereference in Linux DRBD that could cause a crash on a local read error.

    0000033
    1.0K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---
OSlinuxlinux_kernel7.0--

Explore more