AZL-77259
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-77259.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-77259
- Upstream
- Published
- 2026-02-04T17:16:19Z
- Modified
- 2026-08-28T17:47:51.038587037Z
- Summary
- CVE-2026-23084 affecting package kernel for versions less than 6.6.126.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
be2net: Fix NULL pointer dereference in becmdgetmacfrom_list
When the parameter pmacidvalid argument of becmdgetmacfromlist() is set to false, the driver may request the PMACID from the firmware of the network card, and this function will store that PMACID at the provided address pmacid. This is the contract of this function.
However, there is a location within the driver where both pmacidvalid == false and pmac_id == NULL are being passed. This could result in dereferencing a NULL pointer.
To resolve this issue, it is necessary to pass the address of a stub variable to the function.
- References