Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-23237— platform/x86: classmate-laptop: Add missing NULL pointer checks

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于缺少空指针检查，可能导致空指针取消引用。

AI Predicted 5.5 Difficulty: Moderate EPSS 0.19% · P9

Possible ATT&CK Techniques 1 AI

T1059 · Command and Scripting Interpreter

Affected Version Matrix 16

VendorProduct Version RangeStatus
Linux Linux 529aa8cb0a59367d08883f818e8c47028e819d0d< 993708fc18d0d0919db438361b4e8c1f980a8d1b affected
529aa8cb0a59367d08883f818e8c47028e819d0d< af673209d43b46257540997aba042b90ef3258c0 affected
529aa8cb0a59367d08883f818e8c47028e819d0d< eb214804f03c829decf10998e9b7dd26f4c8ab9e affected
529aa8cb0a59367d08883f818e8c47028e819d0d< 9cf4b9b8ad09d6e05307abc4e951cabdff4be652 affected
529aa8cb0a59367d08883f818e8c47028e819d0d< da6e06a5fdbabea3870d18c227734b5dea5b3be6 affected
529aa8cb0a59367d08883f818e8c47028e819d0d< 97528b1622b8f129574d29a571c32a3c85eafa3c affected
529aa8cb0a59367d08883f818e8c47028e819d0d< fe747d7112283f47169e9c16e751179a9b38611e affected
2.6.33 affected
… +8 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-23237

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
platform/x86: classmate-laptop: Add missing NULL pointer checks
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: platform/x86: classmate-laptop: Add missing NULL pointer checks In a few places in the Classmate laptop driver, code using the accel object may run before that object's address is stored in the driver data of the input device using it. For example, cmpc_accel_sensitivity_store_v4() is the "show" method of cmpc_accel_sensitivity_attr_v4 which is added in cmpc_accel_add_v4(), before calling dev_set_drvdata() for inputdev->dev. If the sysfs attribute is accessed prematurely, the dev_get_drvdata(&inputdev->dev) call in in cmpc_accel_sensitivity_store_v4() returns NULL which leads to a NULL pointer dereference going forward. Moreover, sysfs attributes using the input device are added before initializing that device by cmpc_add_acpi_notify_device() and if one of them is accessed before running that function, a NULL pointer dereference will occur. For example, cmpc_accel_sensitivity_attr_v4 is added before calling cmpc_add_acpi_notify_device() and if it is read prematurely, the dev_get_drvdata(&acpi->dev) call in cmpc_accel_sensitivity_show_v4() returns NULL which leads to a NULL pointer dereference going forward. Fix this by adding NULL pointer checks in all of the relevant places.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于缺少空指针检查，可能导致空指针取消引用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 529aa8cb0a59367d08883f818e8c47028e819d0d ~ 993708fc18d0d0919db438361b4e8c1f980a8d1b -
Linux Linux 2.6.33 -

II. Public POCs for CVE-2026-23237

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-23237

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-23237 (7)

Same Patch Batch · Linux · 2026-03-04 · 9 CVEs total

CVE-2026-23231 7.8 HIGH netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
CVE-2026-23236 7.3 HIGH fbdev: smscufx: properly copy ioctl memory to kernelspace
CVE-2026-23232 Revert "f2fs: block cache/dio write during f2fs_enable_checkpoint()"
CVE-2025-71238 scsi: qla2xxx: Fix bsg_done() causing double free
CVE-2026-23233 f2fs: fix to avoid mapping wrong physical block for swapfile
CVE-2026-23234 f2fs: fix to avoid UAF in f2fs_write_end_io()
CVE-2026-23235 f2fs: fix out-of-bounds access in sysfs attribute read/write
CVE-2026-23238 romfs: check sb_set_blocksize() return value

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-23237

No comments yet

Leave a comment