IT

Tracker / CVE-2026-23257

CVE-2026-23257

Medium 5.5

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup In setup_nic_devices(), the initialization loop jumps to the label setup_nic_dev_free on failure. The current cleanup loop while(i--) skip the failing index i, causing a memory leak. Fix this by changing the loop to iterate from the current index i down to 0. Also, decrement i in the devlink_alloc failure path to point to the last successfully allocated index. Compile tested only. Issue found using code review.

Affected products and versions

linux linux_kernel
linux linux_kernel · 4.2 → 5.10.250
linux linux_kernel · 5.11 → 5.15.200
linux linux_kernel · 5.16 → 6.1.163
linux linux_kernel · 6.13 → 6.18.10
linux linux_kernel · 6.2 → 6.6.124
linux linux_kernel · 6.7 → 6.12.70

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References