İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Orta CVSS 5.5

CVE-2026-23257: Linux Kernel: güvenlik açığı

Yayın: · Güncelleme:

Açıklama (NVD)

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup In setup_nic_devices(), the initialization loop jumps to the label setup_nic_dev_free on failure. The current cleanup loop while(i--) skip the failing index i, causing a memory leak. Fix this by changing the loop to iterate from the current index i down to 0. Also, decrement i in the devlink_alloc failure path to point to the last successfully allocated index. Compile tested only. Issue found using code review.

Özet bilgiler

Ürün
Linux Linux Kernel
CVSS v3.1
5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
%0,12 (yüzdelik 2)
CWE
CWE-193
Yama
Mevcut

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
linux-linux-kernel4.2—5.10.250
linux-linux-kernel5.11—5.15.200
linux-linux-kernel5.16—6.1.163
linux-linux-kernel6.2—6.6.124
linux-linux-kernel6.7—6.12.70
linux-linux-kernel6.13—6.18.10
linux-linux-kernel6.196.19—
linux-linux-kernel6.196.19—
linux-linux-kernel6.196.19—
linux-linux-kernel6.196.19—
linux-linux-kernel6.196.19—
linux-linux-kernel6.196.19—
linux-linux-kernel6.196.19—
linux-linux-kernel6.196.19—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları