CVE-2026-23257

Source
https://cve.org/CVERecord?id=CVE-2026-23257
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23257.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-23257
Downstream
Published
2026-03-18T17:41:04.078Z
Modified
2026-04-02T13:12:18.487857Z
Summary
net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup
Details

In the Linux kernel, the following vulnerability has been resolved:

net: liquidio: Fix off-by-one error in PF setupnicdevices() cleanup

In setupnicdevices(), the initialization loop jumps to the label setupnicdev_free on failure. The current cleanup loop while(i--) skip the failing index i, causing a memory leak.

Fix this by changing the loop to iterate from the current index i down to 0.

Also, decrement i in the devlink_alloc failure path to point to the last successfully allocated index.

Compile tested only. Issue found using code review.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23257.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f21fb3ed364bb83533c5efe19354e337ea9ecda9
Fixed
af38d9a5cb49fe9d0d282b44f17fdc1f3270d99d
Fixed
d86c58eb005eb99da402452f3db7a6e0eae32815
Fixed
f1216b80c9040a904d2ad7c8cd24ca0ff1f36932
Fixed
a0d2389c8cdc1f05de5eb8663bffe9ed05dca769
Fixed
f86bd16280a0f88b538394e0565c56ce4756da99
Fixed
293eaad0d6d6b2a37a458c7deb7be345349cd963
Fixed
8558aef4e8a1a83049ab906d21d391093cfa7e7f

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23257.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.2.0
Fixed
5.10.250
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.200
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.163
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.124
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.70
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.10

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23257.json"