HOMEVULNERABILITIESCVE-2026-23132
CRITICAL

CVE-2026-23132

Published: February 14, 2026· Updated: Feb 18, 2026

EPSS:0.02%probability of exploitation in 30 daysPercentile:4.8th

Official Description

In the Linux kernel, the following vulnerability has been resolved:

drm/bridge: synopsys: dw-dp: fix error paths of dw_dp_bind

Fix several issues in dw_dp_bind() error handling:

1. Missing return after drm_bridge_attach() failure - the function

continued execution instead of returning an error.

2. Resource leak: drm_dp_aux_register() is not a devm function, so

drm_dp_aux_unregister() must be called on all error paths after

aux registration succeeds. This affects errors from:

- drm_bridge_attach()

- phy_init()

- devm_add_action_or_reset()

- platform_get_irq()

- devm_request_threaded_irq()

3. Bug fix: platform_get_irq() returns the IRQ number or a negative

error code, but the error path was returning ERR_PTR(ret) instead

of ERR_PTR(dp->irq).

Use a goto label for cleanup to ensure consistent error handling.

NVD Source

Technical Analysis

CVE-2026-23132 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

Affected Vendors & Products

Mentioned vendors (from description):
Linux
CPE data not yet available in NVD for this CVE.

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
External links open in a new tab. Always verify in a controlled environment before use.

All References (2)

Quick Facts

CVE IDCVE-2026-23132
SeverityCRITICAL
CISA KEVNo
EPSS (30d)0.02%
PublishedFeb 14, 2026

Recommended Actions

  • Apply vendor patches immediately
  • Monitor CVE-2026-23132 in threat intel feeds
  • Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.