CVE-2026-23256

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-23256
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23256.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-23256
Downstream
Published
2026-03-18T17:41:02.964Z
Modified
2026-04-02T13:12:18.530711Z
Summary
net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup
Details

In the Linux kernel, the following vulnerability has been resolved:

net: liquidio: Fix off-by-one error in VF setupnicdevices() cleanup

In setupnicdevices(), the initialization loop jumps to the label setupnicdev_free on failure. The current cleanup loop while(i--) skip the failing index i, causing a memory leak.

Fix this by changing the loop to iterate from the current index i down to 0.

Compile tested only. Issue found using code review.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23256.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
846b46873eeb3baf40f7e6d8fe8f98aec95e7727
Fixed
bd680e56e316be92c01568be98d85d7a6c9bd92c
Fixed
01fbca1e93ec3f39f76c31a8f9afa32ce00da48a
Fixed
71a56b89203ec7e5670d94a61a9b4ae617eca804
Fixed
3bf519e39b51cb08a93c0599870b35a23db1031e
Fixed
52b19b3a22306fe452ec9e8ff96063f4bfb77b99
Fixed
4640fa5ad5e1a0dbd1c2d22323b7d70a8107dcfd
Fixed
6cbba46934aefdfb5d171e0a95aec06c24f7ca30

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23256.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.10.0
Fixed
5.10.250
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.200
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.163
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.124
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.70
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.10

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23256.json"