CVE-2026-23257

Katalog CVE

CVSS 5.5 · Medium EPSS 0,11%

Kerentanan Off-by-one Error pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup In setup_nic_devices(), the initialization loop jumps to the label setup_nic_dev_free on failure. The current cleanup loop while(i--) skip the failing index i, causing a memory leak. Fix this by changing the loop to iterate from the current index i down to 0. Also, decrement i in the devlink_alloc failure path to point to the last successfully allocated index. Compile tested only. Issue found using code review.

Rincian

Terbit di NVD

18 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-193: Off-by-one Error

EPSS (30 hari)

0,11% peluang dieksploitasi; lebih tinggi dari 1,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/293eaad0d6d6b2a37a458c7deb7be345349cd963 patch
• https://git.kernel.org/stable/c/8558aef4e8a1a83049ab906d21d391093cfa7e7f patch
• https://git.kernel.org/stable/c/a0d2389c8cdc1f05de5eb8663bffe9ed05dca769 patch
• https://git.kernel.org/stable/c/af38d9a5cb49fe9d0d282b44f17fdc1f3270d99d patch
• https://git.kernel.org/stable/c/d86c58eb005eb99da402452f3db7a6e0eae32815 patch
• https://git.kernel.org/stable/c/f1216b80c9040a904d2ad7c8cd24ca0ff1f36932 patch
• https://git.kernel.org/stable/c/f86bd16280a0f88b538394e0565c56ce4756da99 patch