CVE-2026-23019

Katalog CVE

CVSS 5.5 · Medium EPSS 0,13%

Kerentanan NULL Pointer Dereference pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix NULL dereference on devlink_alloc() failure devlink_alloc() may return NULL on allocation failure, but prestera_devlink_alloc() unconditionally calls devlink_priv() on the returned pointer. This leads to a NULL pointer dereference if devlink allocation fails. Add a check for a NULL devlink pointer and return NULL early to avoid the crash.

Rincian

Terbit di NVD

31 Januari 2026

Terakhir diubah

14 Juli 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,13% peluang dieksploitasi; lebih tinggi dari 2,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/325aea74be7e192b5c947c782da23b0d19a5fda2 patch
• https://git.kernel.org/stable/c/326a4b7e61d01db3507f71c8bb5e85362f607064 patch
• https://git.kernel.org/stable/c/3950054c9512add0cc79ab7e72b6d2f9f675e25b patch
• https://git.kernel.org/stable/c/8a4333b2818f0d853b43e139936c20659366e4a0 patch
• https://git.kernel.org/stable/c/94e070cd50790317fba7787ae6006934b7edcb6f patch
• https://git.kernel.org/stable/c/a428e0da1248c353557970848994f35fd3f005e2 patch
• https://cert-portal.siemens.com/productcert/html/ssa-019113.html